About Srivastava

Can we automate to clear ssl cert cache in PA ? Do we have to do it manually everytime ? @ymiyashita wrote: A1. "debug dataplane reset ssl-decrypt certificate-cache" command will do the job.  (This will also reset the SSL connection of Admin GUI). A2. If it's kind of hostname based whitelist, I don't think it's possible. A3. To see if the session is denied by expired cert, show session id <id number>" might help. It shows "session tracker stage deny    : proxy decrypt failure". There might be better way to check.   Some other commands, - show system setting ssl-decrypt ? > certificate         Show ssl-decrypt certificate > certificate-cache   Show ssl-decrypt certificate cache > exclude-cache       Show ssl-decrypt exclude cache > memory              Show ssl-decrypt memory usage > notify-cache        Show ssl-decrypt notify cache > session-cache       Show ssl-decrypt session cache > setting             Show ssl-decrypt settings   - debug dataplane reset ssl-decrypt ? > certificate-cache        Clear all ssl-decrypt certificate cache in dataplane > certificate-status       Clear all ssl-decrypt certificate CRL status cached in dataplane > exclude-cache            Clear all exclude cache in dataplane > host-certificate-cache   Clear all SSL certificates stored in host > notify-cache             Clear all ssl-decrypt notify-user cache in dataplane > session-cache            Clear all ssl-decrypt session cache in dataplane   ... View more