Tuning peformance of SSL Inspection
Symtom:
When you turn on the feature, the response speed is very slow when you access website for the first time, especially when the website has multiple links at the same time.
Workaround:
1)Install 5.37 wk30 and perform the following command:
Router# debug content-filter cache activate
Router# debug content-filter cache show
→output should: Cache Original: No
Note:
The original mechanism is to cache "Full URL", those commands turn off this mechanism and only do "Domain match", so the accuracy may be reduced.
For example, the following URL will all match to "serach engine"
https://a.search.com/ ==>ori category: serarch engine
https://a.search.com/ad/sample.html ==> ori category: advertisement
https://a.search.com/ad/lootbox.php ==> ori category: phishing
Categories
- All Categories
- 395 Beta Program
- 2.1K Nebula
- 117 Nebula Ideas
- 81 Nebula Status and Incidents
- 5.1K Security
- 83 USG FLEX H Series
- 247 Security Ideas
- 1.3K Switch
- 69 Switch Ideas
- 914 WirelessLAN
- 34 WLAN Ideas
- 5.9K Consumer Product
- 210 Service & License
- 337 News and Release
- 71 Security Advisories
- 21 Education Center
- 5 [Campaign] Zyxel Network Detective
- 2K FAQ
- 912 Nebula FAQ
- 415 Security FAQ
- 237 Switch FAQ
- 207 WirelessLAN FAQ
- 46 Consumer Product FAQ
- 139 Service & License FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 72 About Community
- 62 Security Highlight