09-14-2013 02:57 AM
since we've upgraded our PAs (200, 2000), we notice more and more decryption problems with HTTPS websites. The problem appears suddenly, almost all HTTPS doesn't work and a restart of the PA is required to solve the problem...And then, after one or more days it appears again...
We decided to downgrade our PAs back to 5.0.6...
Did someone also notice it?
09-14-2013 06:24 AM
There is one reported issue with SSL decryption in 5.0.7, that might be fixed in 5.0.8.
At this point I can not get more troubleshooting to match exact symptoms because PAN-OS is already downgraded.
As of now I will suggest to be on 5.0.6.
09-14-2013 06:56 AM
Please run the following commands and show the entire output on 5.0.7. The sample output would be something like below and more.
admin@500> debug dataplane pool statistics
Verify Software pools are not depleted:
[ 0] software packet buffer 0 : 16384/16384 0x8000000021800680
[ 1] software packet buffer 1 : 8192/8192 0x8000000022010700
[ 2] software packet buffer 2 : 8192/8192 0x8000000022818780
[ 3] software packet buffer 3 : 4096/4096 0x8000000023820800
When the issue is happening If by any chance the number is reaching to 1 that would indicate that some buffer is leaking. If this is the case you will need to open a case with Tech support to further investigate the issue.
09-14-2013 09:21 AM
Current PAN-OS 5.0.6 is in use, SSL Decryption may not encounter same issue which we are thinking about.
09-15-2013 11:57 PM
thank you for the information.
shasnain Already downgraded all my PAs to 5.0.6. So your command wouldn't help. We don't like to update it again. Thanks anyway.
A ticket has been open...Will wait for 5.0.8...
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!