SSL inbound inspection delay

[WRibeiro]

hey all, 

I've deployed SSL inbound inspection, connection gets really slow when SSL Inbound Inspection.
It takes almost one minute for the page to be loaded. Without SSL it takes 2 secs.

 Would any of you have a clue what could be causing the problem? 

[WRibeiro · Accepted solution]

Found the problem. The page within customer environment has a zip file. So, when Palo Alto decrypts the traffic and sees that file. It decodes to check the packet and reencode it.  This is causing this delay. It stopped when I disable the Sec Profile from the rule.

[reaper]

have you tried a packetcapture on both sides of the firewall to see if there is anything out of the ordinary (delay in sending packets, lengthy back-and-forth between firewall and server or fiorewall and client,....

[WRibeiro · Accepted solution]

Found the problem. The page within customer environment has a zip file. So, when Palo Alto decrypts the traffic and sees that file. It decodes to check the packet and reencode it.  This is causing this delay. It stopped when I disable the Sec Profile from the rule.

[MP18]

Can you tell me which security profile you disabled please?