SSL Inspection slows down the connection speed

ComMon
ComMon Posts: 1  Freshman Member
edited April 2021 in Security
Model: USG210
Firmware Version:V4.38(AAPI.0) / 2020-04-07 00:07:56

Hi, when i enable SSL inspection the connection is very slow.
Average speed without SSL is 45Mbit download/ 5Mbit upload.
With SSL 20Mbit/400Kbit.

The connection has frequent interruptions, especially in upload. How can I solve the problem?







All Replies

  • Zyxel_Stanley
    Zyxel_Stanley Posts: 1,377  Zyxel Employee
    100 Answers 1000 Comments Friend Collector Seventh Anniversary

    Hi @ComMon

    After enabled SSL inspection function, device will do certificate key exchange between HTTPS server and client. This function will decrease system resource. 

    Currently we are working on SSL inspection performance enhancement in future firmware.

  • MPOster
    MPOster Posts: 15  Freshman Member
    First Comment
    I really need this fixed. End users are angry and I can't do content filtering without it


  • Zyxel_Can
    Zyxel_Can Posts: 342  Zyxel Employee
    25 Answers First Comment Friend Collector

    @Hi MPOster,

     

    Can you please share some information with us;

     1-    What’s the device model name and the full firmware version?

    2-    How do you test the speed for with SSL Inspection and without SSL Inspection?

    3-    What’s the throughput for with SSL Inspection and without SSL Inspection?

    4-    How many clients are connected to the device when make speed test?

     

    Best regards.
  • MPOster
    MPOster Posts: 15  Freshman Member
    First Comment
    1- USG 200 V4.62(ABUI.0) / 2021-01-19 11:22:24
    2- Speed test is done with standard online speed test pages like Spectrum internet speed test but that isn't the issue. The issue is that it takes forever for the pages to load under SSL inspection
    3- The     throughput doesn't change. That portion is fine 
  • Zyxel_Can
    Zyxel_Can Posts: 342  Zyxel Employee
    25 Answers First Comment Friend Collector
    Hi @MPOster,

    For your case let's continue in the following forum topic;

    https://community.zyxel.com/en/discussion/10259/ssl-inspection-pages-slow#latest

    Best regards.

Categories

Security Highlight


Read more

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）