ATP500 SSL INSPECTION 4.55
Options
sk8erbender
Posts: 74 Ally Member
Hello everyone ! Since 4.55 update we have issues with ssl inspection enabled.
Everyone who sits with ssl inspection enabled have a long time loading web pages.
Switching on another firmware to 4.50 have no problem same configuration.
Where to dig ?
0
All Replies
-
Hi @sk8erbender,It could be related to SSL inspection RSA key length.What is your device RSA key on V4.55? 1024-bit or 2048-bit? (rsa-1024 is faster than rsa 2048.)Check ssl-inspection key length:Router> show ssl-inspection status0
-
Cert Cert is 2048 while in ssl settings use 1024Should I create cert 1024 ?0
-
Hi @sk8erbender,Does this issue on MAC OS or Windows OS?Based on my understanding, if your client is MAC OS 10.15, The OS only trust RSA key greater than or equal 2048 bits.In this case, you need to adjust key length to RSA2048.Adjust ATP key lengthRequirements for trusted certificates in iOS 13 and macOS 10.150
Categories
- All Categories
- 384 Beta Program
- 2.1K Nebula
- 116 Nebula Ideas
- 80 Nebula Status and Incidents
- 5.1K Security
- 74 USG FLEX H Series
- 247 Security Ideas
- 1.3K Switch
- 70 Switch Ideas
- 907 WirelessLAN
- 34 WLAN Ideas
- 5.9K Consumer Product
- 210 Service & License
- 333 News and Release
- 71 Security Advisories
- 21 Education Center
- 5 [Campaign] Zyxel Network Detective
- 1.9K FAQ
- 886 Nebula FAQ
- 415 Security FAQ
- 228 Switch FAQ
- 198 WirelessLAN FAQ
- 46 Consumer Product FAQ
- 137 Service & License FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 73 About Community
- 63 Security Highlight