USG310 - slow with SSL inspection and content filter

weite
weite Posts: 14
First Comment Fifth Anniversary
 Freshman Member
in Security

Our USG 310 ist very slow if we have SSL inspection and content filter on.

We think that the problem ist the content filter. If we stop the content filter the sites open in 3-5 seconds, with filter > 18 seconds. The CPU workload is < 20%. We have 40 workstations behind the USG. The Firmware is V4.73(AAPJ.0) / 2022-11-18 09:07:22

Is here someone who know this problem?

All Replies

  • lalaland
    lalaland Posts: 86
    First Answer First Comment Friend Collector Fifth Anniversary
     Ally Member

    What is your sever signed certificated key mode in USG310? ECDSA or RSA?

  • weite
    weite Posts: 14
    First Comment Fifth Anniversary
     Freshman Member

    At the moment I use ECDSA-RSA-1024. I had testet the RSA 1024, but there was no difference.

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,296
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 50 Answers 1000 Comments
     Zyxel Employee

    Hi @weite,

    Can you send startup configuration to me in PM.

    I would like to conduct a lab test based on your configuration file to see if it have slow issue.

    Untitled Image

Categories

Security Highlight


Read more

Security Help Center

  • FAQ
  • New & Release
  • Monthly Express
  • Threat Intelligence
  • Video Tutorials
    • EnglishTiếng ViệtРусскийไทย中文（台灣）