SSL Inspection not running well

Posts: 3,647  Guru Member
100 Answers 2500 Comments Friend Collector Seventh Anniversary

USG FLEX 200H V1.21(ABWV.0)

Only some sites run well many others load slowly or not at all

Welcome!

It looks like you're new here. If you want to get involved, click on this button!

All Replies

  • Posts: 2,993  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate

    Hi @PeterUK,

    Could you provide the URL/link you test for us to check? We need the site run well and the load slowly one. Also, it would be helpful if you could share the loading time for comparison.

    Zyxel Melen


  • Posts: 3,647  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited July 2024

    Hi Melen

    sites like (below) just don't load and times outs

    https://uk.yahoo.com/

    https://www.grc.com/intro.htm

    sites like (below) load ok but still the browser looks to be stuck to load something else for the site

    https://www.sslforfree.com/

  • Posts: 2,993  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate

    Hi @PeterUK,

    I did a simple local test and the websites "Yahoo UK" and "Home of Gibson Research" are able to load.

    Could you help to share these information for investigation?

    1. The "Server Signed Certificate Key Mode" you used.
    2. The SSL inspection summary. Below is an example screenshot.
    3. A video you access those websites, you mentioned above, with a timer.

    Thanks in advance.

    Zyxel Melen


  • Posts: 3,647  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary
    edited July 2024

    The Server Signed Certificate Key Mode is the default ecdsa-rsa-2048

    I get a video done in VirtualBox

    Ok here is the video

    Also when I had a license non H Flex200 SSL Inspection worked fine

  • Posts: 3,647  Guru Member
    100 Answers 2500 Comments Friend Collector Seventh Anniversary

    Other problems are the SSL Inspection is messing with the site code like scan.co.uk

  • Posts: 2,993  Zyxel Employee
    Zyxel Certified Network Engineer Level 1 - Switch Zyxel Certified Network Administrator - Switch Zyxel Certified Network Administrator - Nebula Zyxel Certified Sales Associate

    Hi @PeterUK,

    Could we schedule a remote session to address this issue? I will direct message you to arrange the timing.

    Zyxel Melen


Welcome!

It looks like you're new here. If you want to get involved, click on this button!

Welcome!

It looks like you're new here. If you want to get involved, click on this button!