Firefox Error ssl_error_rx_unexpected_new_session_ticket

[diennea]

Hi,

after PA-500 upgrade (from 4.1.7 to 4.1.9) I solved SSL problem with Chrome but now I have a problem with firefox opening SSL pages (when they was decrypted by the firewall).

For example opening https://www.google.com I receive this error:

"SSL ha ricevuto un messaggio inatteso di tipo New Session Ticket handshake.

(Codice di errore: ssl_error_rx_unexpected_new_session_ticket)"

Using IE or Chrome all works fine.

I'm using Firefox 10.0.10 ESR

As you can see firefox is correctly configured to trust my decryption certificate.

Decrypt

[mikand]

I assume you have fully restarted firefox on this specific client (verify with task manager that you dont have any firefox.exe leftover)?

Because firefox (and IE) will cache various stuff as long as at least one window is still being opened.

If you in the middle of this have upgraded your PA (or rather rebooted it) the cached ssl session will no longer be valid.

[diennea]

After few hours problem disappear.

I don't know why.

Thanks