Since update to 3.1.4 no ssl decryption

[mhuels]

We have some user categories with "no decryption" but the default rule "decrypt".

Before updating from 3.1.3, https://secure.eicar.org/eicar.com.txt was blocked reliably. Since 3.1.4 not. Nothing else was changed.

In fact i cannot see any ssl decryption on my PAN 2050. Is there a way to troubleshoot the issue?

[jnguyen]

please contact your support provider and open up a case via email or phone call.

[mhuels]

The PA2050 shows:

CLI: show system setting ssl-decrypt certificate-cache | match Cached

Cached 252 certificates

CLI: debug dataplane reset ssl-decrypt certificate-cache

deleted 252 cert entries

has resolved the problem.

[ggoudr]

This is a known issue in 3.1.4 and 3.1.5.

Unfortunately, as you can understand it is not possible to execute this command in order to temporarily resolve the problem.

The issue also existis as well in the updated version 3.1.6.

These versions 3.1.4, 3.1.5 and 3.1.6 have several issues with SSL Decryption that stops working. A case has been opened and we are waiting for the next software update (3.1.7?) to resolve all the ssl-decryption issues.

Regards,

George

[ggoudr]

SSL Decryption issues seem to have been resolved in 3.1.7