SSL Inspection Pages SLOW
All Replies
-
Same Problem, If I turn off SLL inspection, the pages are displayed instantly.
If the pages have already been displayed since the firewall was started, their loading is faster.
Model Device : ATP700
Firmware version : V4.62(ABTJ.0) / 2021-01-19 11:09:16Certificat CN=atp700_BCCF4FB75A43 (default certificate)Validation Result=self-signed
Internet connexion : (two fibers, For each : 500mbs Down, 200Mbs Up)
1 -
I have read other forums that this is an issue with Zyxel new firmware. I am 12 days from a return as I never experienced this using a Fortigate device. My first encounters with Zyxel have not been good ones and I was told so many good things about them.0
-
Hi All,
We have remote access to your site. Now, we can't see the symptom anymore.
Can you help us to clarify if that issue still exist?
By default Server Signed Certificate Key Mode is :ECDSA-RSA-1024.
Can you try to change it to ECDSA-RSA-1024 and try it’s performance?
How long does it take to load web pages with SSL Inspection and without SSL Inspection?
How many clients are connected to network when you do the test?
Moreover, can you also disable Content Filter and enable SSL Inspection then try the performance for that symptom?
0 -
UPDATE TO ISSUE:
Changed Certificate Key to ECDSA-RSA-102 and turned off Custom Service in Security Profile
I did this three hours ago and so far have not heard anything from the end users about page loading slow.
0 -
I have the same problem with slow page opening. If Content Filter and biometric are enabled, the pages are either very slow to open or not open at all. But turn off Content Filter and pages start to tear off again at normal speed.0
-
alexsmith98 said:I have the same problem with slow page opening. If Content Filter and biometric are enabled, the pages are either very slow to open or not open at all. But turn off Content Filter and pages start to tear off again at normal speed.0
-
SECOND UPDATE:
End users complaining about slow loading pages again. Disabled SSL and left the content filtering on. Back to normal again.
Still needs to be repaired0 -
Hi @Zyxel_Can
"How long does it take to load web pages with SSL Inspection and without SSL Inspection?"
- Without SSL Inspection : Less than 1 second.
- With SSL Inspection : About 10 seconds. it depends on the sites. it's faster if they've already been loaded once.
How many clients are connected to network when you do the test ?
- There are less than 20 in the company and only half have internet acces. There are about forty computers whith only about fifteen having internet. There are between 200 to 400 SSL sessions out of 4000 max according to the "ssl inspection service".
Moreover, can you also disable Content Filter and enable SSL Inspection then try the performance for that symptom?
- When i disable "content filter service", there is almost no change. On the other hand, if i stay content filter enabled and i disable SSL Inspection, It work perfecty.
Sorry for my English
Best regards.0 -
MPOster said:
UPDATE TO ISSUE:
Changed Certificate Key to ECDSA-RSA-102 and turned off Custom Service in Security Profile
I did this three hours ago and so far have not heard anything from the end users about page loading slow.
In my configuration, this setting is initially disabled.-In my situation when I disable Content Filter but leave SSL Inspection enabled. The situation with opening pages is improving, and they open at almost the same speed as with disabled SSL Inspection.
0
Categories
- All Categories
- 415 Beta Program
- 2.3K Nebula
- 141 Nebula Ideas
- 94 Nebula Status and Incidents
- 5.5K Security
- 216 USG FLEX H Series
- 262 Security Ideas
- 1.4K Switch
- 71 Switch Ideas
- 1K Wireless
- 39 Wireless Ideas
- 6.3K Consumer Product
- 243 Service & License
- 382 News and Release
- 81 Security Advisories
- 27 Education Center
- 8 [Campaign] Zyxel Network Detective
- 3K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 83 About Community
- 71 Security Highlight