For details on cookie usage on our site, read our Privacy Policy
SSL Decryption bug in PAN-OS 9.1.14
- LIVEcommunity
- Discussions
- General Topics
- SSL Decryption bug in PAN-OS 9.1.14
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Printer Friendly Page
- Mark as New
- Subscribe to RSS Feed
- Permalink
05-23-2022 10:58 AM
I recently upgraded from panos 9.1.13-h3 to 9.1.14 then SSL decryption stopped working, in the traffic monitor there wasn't any decryption error but when i excluded a PC the internet worked
and it seams other people are also having the same issue (Reddit ), but its not in the known issue list until now
so i had to revert to the previous version and its working now fine
Accepted Solutions
- Mark as New
- Subscribe to RSS Feed
- Permalink
06-06-2022 02:07 AM - edited 06-06-2022 02:08 AM
It looks like that a workaround has been published or am I wrong?
- Mark as New
- Subscribe to RSS Feed
- Permalink
05-23-2022 11:54 AM - edited 05-23-2022 11:55 AM
I don't know if this is your exact issue, but it seems as if we are tracking something internally. PAN-194219, the software packet buffers are depleting erroneously during HTTP/2 inspection only post 9.1.14 upgrade, and subsequently not decrypting.
I am now following the issue and will post updates / workarounds.
- Mark as New
- Subscribe to RSS Feed
- Permalink
05-24-2022 03:06 AM
Ok thank you, will not update until the issue is resolved
- Mark as New
- Subscribe to RSS Feed
- Permalink
05-24-2022 06:54 AM
Same here. Rolling back now....I wonder why there is not any statement by PA. Or is it and I didn't find it?
- Mark as New
- Subscribe to RSS Feed
- Permalink
05-24-2022 10:32 AM
The issue is escalated to the senior support queue, they've successfully recreated it in a lab and are now identifying root cause.
- What are the capabilities of Cortex XDR without endpoint agents and just with PANOS firewall integration like an NDR solution? in Cortex XDR Discussions
- URL filtering policy is not enforced on TLS handshakes for decrypted HTTPS sessions (panos-cve-2020- 2035) in Threat & Vulnerability Discussions
- VM-500 ssl decryption session limit in General Topics
- Exporting monitor logs is not showing decrypt flag information. in General Topics
Show your appreciation!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
