SSL-decrypt resources needed

[BigPalo]

Hi,

We are enabling SSL-decrypt for several categories in our FW. We realised that the CPU and memory increased since this config, but its so far about the maximum in datasheet for PA3050. How can we know the SSL decypt consumes and try to have any reference about this?

[BigPalo]

any idea about to know why the PA memory is being consumed and where?

[OtakarKlier]

Hello,

By how much did it increase? How much traffic is flowing through it vs what the spec sheet says? My guess is that there is something else causing the high CPU. Here are a few pages to look at. I think last time I opened a case because i couldnt find a solution via the pages.

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClRTCA0

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CmV2CAK

Regards,

[LAYER_8]

Palo has an internal tool for this. Reach out to your account team to get a readout from P.O.P.S.I.C.L.E.