02-14-2014 02:13 AM
We've been using SSL decryption for a while now.
Where for the most websites, this is not an issue, once in a while a user complains that certain https website doesn't load at all. Browser just keeps loading indefinitely.
We can't find a reason in the logs, traffic is allowed, not blocked, decrypted flag is checked in the log detail.
For now our workaround is to add those websites to an encryption exception list (address group). But that list is starting to grow to 30+ addresses.
Two problems with this approach:
- the list is hard to maintain
- no SSL decryption, so no full App-ID visiblity for those
How can I troubleshoot this, how can I determine the real reason the sites don't load ?
