after PA-500 upgrade (from 4.1.7 to 4.1.9) I solved SSL problem with Chrome but now I have a problem with firefox opening SSL pages (when they was decrypted by the firewall).
For example opening https://www.google.com I receive this error:
"SSL ha ricevuto un messaggio inatteso di tipo New Session Ticket handshake.
(Codice di errore: ssl_error_rx_unexpected_new_session_ticket)"
Using IE or Chrome all works fine.
I'm using Firefox 10.0.10 ESR
As you can see firefox is correctly configured to trust my decryption certificate.
I assume you have fully restarted firefox on this specific client (verify with task manager that you dont have any firefox.exe leftover)?
Because firefox (and IE) will cache various stuff as long as at least one window is still being opened.
If you in the middle of this have upgraded your PA (or rather rebooted it) the cached ssl session will no longer be valid.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!
The Live Community thanks you for your participation!