DPI-SSL - HTTPS Traffic is very slow

Description

After the upgrade to 6.5.2.X, 6.5.3.X and 6.5.4.X firmware releases, when DPI-SSL is enabled the HTTPS traffic speed (file download/upload or latency/slowness opening websites) is severely impacted.

Please make sure you check the following:

  • On Manage | Decryption Services | DPI-SSL/TLS Client disable the Content Filter option
  • Test the HTTPS connection using speedof.me and www.speedsmart.net and save a screenshot of both.
  • If the result is the same, untick the box on Enable SSL Client Inspection
  • Test again: save a screenshot of this test.

NOTE: When DPI-SSL is enabled, it's expected a throughput reduction up to 50%. This article applies when the reduction is over this value.

Resolution

The latest firmware release 6.5.4.7-83n contains multiple stability and performance fixes with some of them aiming to improve/fix the DPI-SSL issue.

Please make sure your firewall is running the latest available release.

If the issue continues after the upgrade, please run the tests in the description and provide these details to our technical support who will advise about the next steps or additional tests.

There are two ways to contact technical support:

1. Online: Visit mysonicwall.com. Once logged in select Resources & Support | Support | Create Case

2. By phone: please use our toll-free number at 1-888-793-2830. Please have your SonicWall serial number available to create a new support case.

If you do not have a mysonicwall.com account create one for free!

 

Related Articles

  • SSH password authentication fails after OpenSSH upgrade
    Read More
  • Where can I download SonicWall stencils?
    Read More
  • Configuring High Availability Monitoring settings
    Read More
not finding your answers?