SSL Inspection Pages SLOW

jonatan

Hi @Zyxel_Can

The file sented in a personal message.

Zyxel_Can

Hi @jonatan,

We are already debugging in your site. Please kindly wait for updates.

Hi @Julien_ALM,

Can you please share your startup-config.conf file with me by private message?
I would like to test this case for you.

Motivio

Hi, I also have slow Website loading with SSL Inspection on my FLEX 100, running the lates firmware.
Especially pictures on a website are taking very long to load, while you are visiting the site for the first time. Without SSL Inspection it's very fast.
Key Mode is: ECDSA-RSA-1024

Regards,
JO

MPOster

Motivio said:

Hi, I also have slow Website loading with SSL Inspection on my FLEX 100, running the lates firmware.

If you attempt to visit a website like zillo.com you will have to wait as if it were dial-up. As of ONE MONTH Zyxel has not logged into my USG-200 even though I gave them full access to it. Here is the funny part --- one of the headquarter spots of Zyxel is literally 9 miles away from my location in Anaheim. The tech looking into this has given me absolutely no feedback. 



  

MPOster

Looks like this is certainly an issue with Zyxel and not our ISP's 

Zyxel_Can

Hi @Motivio,

Can you share some information with us;

1-    How long does it take to open a website with SSL inspection enabled and without SSL inspection?

2-    Which website do you use for testing?

3-    Can you try to update your signature?

(Configuration > Security Service > SSL Inspection > Certificate Update)

4-    Can you provide me remote access to a client in your network and admin account to your gateway by private message?

 

Hi @MPOster,

          Do you mean USG200 or USG FLEX 200?

          What’s the firmware version of your device?

Motivio

@Zyxel_Can
I've tested with the following website:
https://bildarchive.motivio.de/archive

I run the Certificate Update manually. Even that it didn't change the version in the display, there was a change afterwards, when I cleaned up the "Exclude List" under SSL Inspection.
Now it seams to be ok.

MPOster

I hope this didn't go stale -- I literally just shut off the SSL because I am sick of hearing the complaints but I want to get this fixed. My prior set-up was a Fortigate which uses the same system settings and I didn't have any issues with that one . 

Zyxel_Can

Hi @MPOster,

We apologize for your inconvenience.

We have addressed this symptom and currently we are working on the improvement. 

DG_1

Hello!
Is there any progress on this topic?