Does SSL decryption uses software or Hardware

[MP18]

Need to confirm when we enable ssl decryption then it is resource intensive.

Does it uses both hardware and software resources?

[BPry]

@MP18,

You'll see a resource hit when you enable decryption, and the size of the hit depends on a number of metrics. I'd recommend that when you first enable decryption you start with a subset of users to see what your companies specific hit will actually be. Keep in mind that each platform will also have stats specific to SSL-Decryption on their datasheet, so that's one area you can look to see if you have large enough firewalls to actually support the feature.

[MP18]

Thanks for that info.

Need to know if SSL decryption is done by hardware on 5050 or 5220 PA?

[BPry · Accepted solution]

@MP18,

PA-32xx and above (anything in the 5k or 7k series) does ssl decryption via dedicated hardware. The PA-2xx, PA-8xx, and PA-30xx are strictly software based. Regardless of what model you have the MP CPU usage will increase; it simply increases by a wider margin with the PA-2xx, PA-8xx and PA-30xx series devices. 

[barjakovsky]

Hello, 

Would it be possible to know the source of the information regarding the fact that SSL decryption is hardware for models greater than or equal to 32xxx?
I can't find anything about this :(.