USG310 - slow with SSL inspection and content filter

Options
weite
weite Posts: 28  Freshman Member
First Comment Seventh Anniversary
in Security

Our USG 310 ist very slow if we have SSL inspection and content filter on.

We think that the problem ist the content filter. If we stop the content filter the sites open in 3-5 seconds, with filter > 18 seconds. The CPU workload is < 20%. We have 40 workstations behind the USG. The Firmware is V4.73(AAPJ.0) / 2022-11-18 09:07:22

Is here someone who know this problem?

All Replies

  • lalaland
    lalaland Posts: 91  Ally Member
    First Answer First Comment Friend Collector Sixth Anniversary

    What is your sever signed certificated key mode in USG310? ECDSA or RSA?

  • weite
    weite Posts: 28  Freshman Member
    First Comment Seventh Anniversary

    At the moment I use ECDSA-RSA-1024. I had testet the RSA 1024, but there was no difference.

  • Zyxel_Cooldia
    Zyxel_Cooldia Posts: 1,537  Zyxel Employee
    Zyxel Certified Network Administrator - Security Zyxel Certified Sales Associate 100 Answers 1000 Comments

    Hi @weite,

    Can you send startup configuration to me in PM.

    I would like to conduct a lab test based on your configuration file to see if it have slow issue.

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）