PA500 SSL decryption problem

[Indorama_Ventures]

To Palo Alto:

Not sure where to report this but today we have identified a problem with SSL decryption on our PA500 firewall.

The problem was that certain SSL encrypted webpages did not display correctly anymore. Websites that were in our excluded categories like banking/financial displayed correctly.

Disabling SSL decryption fixed the problem. Enabling SSL decryption again and the problem returned.

We had this problem before with an older PAN OS version (7.1.2). After we had upgraded to version 7.1.8 the problem did not occur for a long time (since March this year) until today.

I was able to succesfully failover to our passive firewall and reboot the one that was giving problems.

After the reboot it successfully failed over again and the problem was resolved.

Not sure if this is a known issue but I thought I would mention this nevertheless.

Remko