DPI-SSL - HTTPS Traffic is very slow

Description

After the upgrade to 6.5.2.X, 6.5.3.X and 6.5.4.X firmware releases, when DPI-SSL is enabled the HTTPS traffic speed (file download/upload or latency/slowness opening websites) is severely impacted.

Please make sure you check the following:

  • On Manage | Decryption Services | DPI-SSL/TLS Client disable the Content Filter option
  • Test the HTTPS connection using speedof.me and www.speedsmart.net and save a screenshot of both.
  • If the result is the same, untick the box on Enable SSL Client Inspection
  • Test again: save a screenshot of this test.

NOTE: When DPI-SSL is enabled, it's expected a throughput reduction up to 50%. This article applies when the reduction is over this value.

Resolution

The latest firmware release 6.5.4.7-83n contains multiple stability and performance fixes with some of them aiming to improve/fix the DPI-SSL issue.

Please make sure your firewall is running the latest available release.

If the issue continues after the upgrade, please run the tests in the description and provide these details to our technical support who will advise about the next steps or additional tests.

There are two ways to contact technical support:

1. Online: Visit mysonicwall.com. Once logged in select Resources & Support | Support | Create Case

2. By phone: please use our toll-free number at 1-888-793-2830. Please have your SonicWall serial number available to create a new support case.

If you do not have a mysonicwall.com account create one for free!

 

Related Articles

  • How to block ICMP (Ping ) using Application control
    Read More
  • SonicWall GEN8 TZ and NSa Firewalls FAQ
    Read More
  • How to configure Link Aggregation
    Read More
not finding your answers?