ssl decryption vwire

[minow]

Hey

The user ssl session is going in this path:

User -> PA VWeirw internal > Backbone > PA VWeirw External > Checkpoint > internet

If we enable decryption on the external VWeirw the user is getting timeout in the browser

If we enable decryption on the internal VWire the decryption is working well

does somone bump into this situation?

thanks

dor

[VinceM]

Hi,

not really clear .... maybe with a scheme 🙂

Have you got security rule based on web-browsing and app-default ?

If yes, it can explain the situation, du to decryption, you have web-browsing on 443 and it doesn't match app-default.

Hope help.

V.

[minow]

[VinceM]

Hi,

and what about your security rules ? and session log when decryption fail ?

V.

[panos]

can you share a session which you say gets time out

with show session id

and the rule it matches

[minow]

amm not right now, this was during a POC so i dont have access to the machine for now.

maby some one can replicate