SSL Inspection not running well

PeterUK
PeterUK Posts: 3,460  Guru Member
100 Answers 2500 Comments Friend Collector Seventh Anniversary

USG FLEX 200H V1.21(ABWV.0)

Only some sites run well many others load slowly or not at all

All Replies

  • Zyxel_Melen
    Zyxel_Melen Posts: 2,577  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate

    Hi @PeterUK,

    Could you provide the URL/link you test for us to check? We need the site run well and the load slowly one. Also, it would be helpful if you could share the loading time for comparison.

    Zyxel Melen


  • PeterUK
    PeterUK Posts: 3,460  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited July 19

    Hi Melen

    sites like (below) just don't load and times outs

    https://uk.yahoo.com/

    https://www.grc.com/intro.htm

    sites like (below) load ok but still the browser looks to be stuck to load something else for the site

    https://www.sslforfree.com/

  • Zyxel_Melen
    Zyxel_Melen Posts: 2,577  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate

    Hi @PeterUK,

    I did a simple local test and the websites "Yahoo UK" and "Home of Gibson Research" are able to load.

    Could you help to share these information for investigation?

    1. The "Server Signed Certificate Key Mode" you used.
    2. The SSL inspection summary. Below is an example screenshot.
    3. A video you access those websites, you mentioned above, with a timer.

    Thanks in advance.

    Zyxel Melen


  • PeterUK
    PeterUK Posts: 3,460  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited July 23

    The Server Signed Certificate Key Mode is the default ecdsa-rsa-2048

    I get a video done in VirtualBox

    Ok here is the video

    Also when I had a license non H Flex200 SSL Inspection worked fine

  • PeterUK
    PeterUK Posts: 3,460  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary

    Other problems are the SSL Inspection is messing with the site code like scan.co.uk

  • Zyxel_Melen
    Zyxel_Melen Posts: 2,577  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate

    Hi @PeterUK,

    Could we schedule a remote session to address this issue? I will direct message you to arrange the timing.

    Zyxel Melen