SSL Decryption bug in PAN-OS 9.1.14

[LAS]

I recently upgraded from panos 9.1.13-h3 to 9.1.14 then SSL decryption stopped working, in the traffic monitor there wasn't any decryption error but when i excluded a PC the internet worked

and it seams other people are also having the same issue (Reddit ), but its not in the known issue list until now

so i had to revert to the previous version and its working now fine

[jpan123]

Not working to me. 😞

[jpan123]

Any recommendation that I can try?

[LAYER_8]

Have you both enabled strip ALPN?

[N2Z2]

In my case yes

[jpan123]

What do you mean both enabled?

[LAYER_8]

SSL forward proxy settings, follow this guide. Strip ALPN is the known-good workaround for this bug. 

[jpan123]

Did disable globally?

[LAYER_8]

You will still be decrypting traffic. 

Strip ALPN just downgrades HTTP/2 to HTTP/1 globally.