ssl decryption vwire

minow · ‎01-07-2014

Hey

The user ssl session is going in this path:

User -> PA VWeirw internal > Backbone > PA VWeirw External > Checkpoint > internet

If we enable decryption on the external VWeirw the user is getting timeout in the browser

If we enable decryption on the internal VWire the decryption is working well

does somone bump into this situation?

thanks

dor

VinceM · ‎01-07-2014

Hi,

not really clear .... maybe with a scheme 🙂

Have you got security rule based on web-browsing and app-default ?

If yes, it can explain the situation, du to decryption, you have web-browsing on 443 and it doesn't match app-default.

Hope help.

V.

minow · ‎01-09-2014

VinceM · ‎01-09-2014

Hi,

and what about your security rules ? and session log when decryption fail ?

V.

panos · ‎01-09-2014

can you share a session which you say gets time out

with show session id

and the rule it matches

minow · ‎01-18-2014

amm not right now, this was during a POC so i dont have access to the machine for now.

maby some one can replicate