Need to confirm when we enable ssl decryption then it is resource intensive.
Does it uses both hardware and software resources?
Solved! Go to Solution.
You'll see a resource hit when you enable decryption, and the size of the hit depends on a number of metrics. I'd recommend that when you first enable decryption you start with a subset of users to see what your companies specific hit will actually be. Keep in mind that each platform will also have stats specific to SSL-Decryption on their datasheet, so that's one area you can look to see if you have large enough firewalls to actually support the feature.
PA-32xx and above (anything in the 5k or 7k series) does ssl decryption via dedicated hardware. The PA-2xx, PA-8xx, and PA-30xx are strictly software based. Regardless of what model you have the MP CPU usage will increase; it simply increases by a wider margin with the PA-2xx, PA-8xx and PA-30xx series devices.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!