SSL Inspection not running well

PeterUK
PeterUK Posts: 3,118  Guru Member
Community MVP 2500 Comments Sixth Anniversary 100 Answers

USG FLEX 200H V1.21(ABWV.0)

Only some sites run well many others load slowly or not at all

All Replies

  • Zyxel_Melen
    Zyxel_Melen Posts: 2,059  Zyxel Employee
    250 Answers Zyxel Certified Network Engineer Level 1 - Switch Third Anniversary 1000 Comments

    Hi @PeterUK,

    Could you provide the URL/link you test for us to check? We need the site run well and the load slowly one. Also, it would be helpful if you could share the loading time for comparison.

    Zyxel Melen


    Don't miss this great chance to upgrade your Nebula org. for free! 


  • PeterUK
    PeterUK Posts: 3,118  Guru Member
    Community MVP 2500 Comments Sixth Anniversary 100 Answers
    edited July 19

    Hi Melen

    sites like (below) just don't load and times outs

    https://uk.yahoo.com/

    https://www.grc.com/intro.htm

    sites like (below) load ok but still the browser looks to be stuck to load something else for the site

    https://www.sslforfree.com/

  • Zyxel_Melen
    Zyxel_Melen Posts: 2,059  Zyxel Employee
    250 Answers Zyxel Certified Network Engineer Level 1 - Switch Third Anniversary 1000 Comments

    Hi @PeterUK,

    I did a simple local test and the websites "Yahoo UK" and "Home of Gibson Research" are able to load.

    Could you help to share these information for investigation?

    1. The "Server Signed Certificate Key Mode" you used.
    2. The SSL inspection summary. Below is an example screenshot.
    3. A video you access those websites, you mentioned above, with a timer.

    Thanks in advance.

    Zyxel Melen


    Don't miss this great chance to upgrade your Nebula org. for free! 


  • PeterUK
    PeterUK Posts: 3,118  Guru Member
    Community MVP 2500 Comments Sixth Anniversary 100 Answers
    edited July 23

    The Server Signed Certificate Key Mode is the default ecdsa-rsa-2048

    I get a video done in VirtualBox

    Ok here is the video

    Also when I had a license non H Flex200 SSL Inspection worked fine

  • PeterUK
    PeterUK Posts: 3,118  Guru Member
    Community MVP 2500 Comments Sixth Anniversary 100 Answers

    Other problems are the SSL Inspection is messing with the site code like scan.co.uk

  • Zyxel_Melen
    Zyxel_Melen Posts: 2,059  Zyxel Employee
    250 Answers Zyxel Certified Network Engineer Level 1 - Switch Third Anniversary 1000 Comments

    Hi @PeterUK,

    Could we schedule a remote session to address this issue? I will direct message you to arrange the timing.

    Zyxel Melen


    Don't miss this great chance to upgrade your Nebula org. for free!