Time based No-decrypt rule?

[JRussell]

Hi All,

On my site we have a Decrypt-all rule in place (apart from some no-decrypt rules for specific business related sites).

The problem I have is that some users are having issues accessing sites like Easyjet and Ryanair's booking pages, this I am fairly sure is due to the Palo Box decrypting the info and the websites not liking that.

Now this is not work related so as such I don't want them doing it during working hours. However, I don't mind them doing so during lunch breaks. So my question is, can I do a no-decrypt rule for certain sites like this that only comes into affect during lunch hours?

[mikand]

Sounds odd because using a regular webbrowser and these sites are on the internet I dont really see why PA would be the fault here (unless they use some unsupported TLS version or such)?

[JRussell]

Yes, these are all using a standard web browser. But the only reason I know it is the PA box is because if I put a no-decyrpt rule in for those sites in question then it works. Without them and with the decrypt-all rule in place it doesn't work. The website loads but then will get to a point where it will not continue.

This have only really noticed it on https sites though.

[mikand]

Do you have a direct link which doesnt load on your PA with decrypt-all enabled which I (or someone else) could test with?

[mikand]

By the way, could you verify if this is the case for you?

[JRussell]

Yes, it looks like that might be the case I am having. A few links that you could try. Halfway through booking a flight through www.ryanair.com

Or using Dropbox.com. There are a few other travel websites, such as bookings.com and easyjet.com

[mikand]

While other https sites like gmail.com works without problems?