09-03-2018 07:59 PM
I have a VM-100 in my lab. I haven't used it in while but recently booted it up and upgraded to 8.0.12. I noticed a lot of unknown-tcp traffic for mostly any site when I enabled tls decryption. If i disabled tls decryption, the traffic is all ssl.
I have never seen this before. I'm running it on esxi 5.5
09-04-2018 02:23 PM
I was able to resolve the issue by reconfiguring my lab environment. I did some creative routing to initially configure this how I needed it, but seems all of a sudden it was creating an issue.
I really should switch to a PA-220 lab unit 🙂
09-04-2018 12:04 AM
I've seen similar issue with inbound SSL decryption of activesync towards Exchange on PAN-OS 8.0.10. The session was first 'recognised' as unknown-tcp instead of activesync. Later we started getting decrypt error messages in logs. The certificate was correct and the supported cipher suites on server matched those on PA. Still researching this issue before opening a case.
09-04-2018 02:23 PM
I was able to resolve the issue by reconfiguring my lab environment. I did some creative routing to initially configure this how I needed it, but seems all of a sudden it was creating an issue.
I really should switch to a PA-220 lab unit 🙂
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
