USG310 - slow with SSL inspection and content filter

Options
weite
weite Posts: 17  Freshman Member
First Anniversary First Comment

Our USG 310 ist very slow if we have SSL inspection and content filter on.

We think that the problem ist the content filter. If we stop the content filter the sites open in 3-5 seconds, with filter > 18 seconds. The CPU workload is < 20%. We have 40 workstations behind the USG. The Firmware is V4.73(AAPJ.0) / 2022-11-18 09:07:22

Is here someone who know this problem?

All Replies

  • lalaland
    lalaland Posts: 90  Ally Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    What is your sever signed certificated key mode in USG310? ECDSA or RSA?

  • weite
    weite Posts: 17  Freshman Member
    First Anniversary First Comment
    Options

    At the moment I use ECDSA-RSA-1024. I had testet the RSA 1024, but there was no difference.

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,450  Zyxel Employee
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Hi @weite,

    Can you send startup configuration to me in PM.

    I would like to conduct a lab test based on your configuration file to see if it have slow issue.

Security Highlight