SSL Inspection problem [message #154425] |
Sat, 27 May 2023 08:42  |
farhad
Messages: 3 Registered: April 2023
|
|
|
|
Hi,
I've finally installed Kerio control on two HP Proliant DL 360 G9 and routed internet traffic to it. But there's a problem when I enable SSL Inspection for clients browsing will be slow!!!
I have 600 users. Is there any soloution for this problem? for example increase something in configuration. I disabled anti-virus, IPs, Maximum connection but the problem is not resolved.
Thanks in advance.
|
|
|
|
Re: SSL Inspection problem [message #154435 is a reply to message #154425] |
Mon, 29 May 2023 11:35   |
farhad
Messages: 3 Registered: April 2023
|
|
|
|
Thank you Chris.
I defined custom DNS server for *.zvelo.com but I didn't reboot Kerio Control. I didn't defined any web filter rule and now I just want to monitor client internet usage. I enabled SSL inspection for authentication of users (NTLM) without it user must first open HTTP site for authentication. Honestly, I am worry about Kerio Control OS limitation and may there is some limitation for maximum users supports cause only 12 gigabyte of 96 gigabyte memory and 2% of two CPUs used. I know SSL inspection has high workload on CPU but in this scenario I don't see any high CPU usage.
|
|
|
Re: SSL Inspection problem [message #154628 is a reply to message #154435] |
Thu, 29 June 2023 14:44  |
tverweij
Messages: 86 Registered: March 2010 Location: Curacao
|
|
|
|
Wait for the SNORT3 update that is being tested internal at GFI at this moment - this update will scale the IPS over the available processors.
Further, go to "Content Filter", tab "Applications and Web Categories" and uncheck "Enable application awareness" to get more speed from Kerio.
|
|
|