GFI Software

Welcome to the GFI Software community forum! For support please open a ticket from https://support.gfi.com.

Home » GFI User Forums » Kerio Control » SSL Inspection problem
SSL Inspection problem [message #154425] Sat, 27 May 2023 08:42 Go to next message
farhad is currently offline  farhad
Messages: 3
Registered: April 2023
Hi,
I've finally installed Kerio control on two HP Proliant DL 360 G9 and routed internet traffic to it. But there's a problem when I enable SSL Inspection for clients browsing will be slow!!!
I have 600 users. Is there any soloution for this problem? for example increase something in configuration. I disabled anti-virus, IPs, Maximum connection but the problem is not resolved.
Thanks in advance.
Re: SSL Inspection problem [message #154431 is a reply to message #154425] Sun, 28 May 2023 22:28 Go to previous messageGo to next message
chrisc is currently offline  chrisc
Messages: 155
Registered: January 2022
Hi farhad, you may find our article Slow Internet Connection with Activated Kerio WebFilter in Kerio Control helpful. If not, kindly take a moment to submit a request to our Technical Support team!

Chris Contorinis
Customer Care Specialist
GFI Software
Re: SSL Inspection problem [message #154435 is a reply to message #154425] Mon, 29 May 2023 11:35 Go to previous messageGo to next message
farhad is currently offline  farhad
Messages: 3
Registered: April 2023
Thank you Chris.
I defined custom DNS server for *.zvelo.com but I didn't reboot Kerio Control. I didn't defined any web filter rule and now I just want to monitor client internet usage. I enabled SSL inspection for authentication of users (NTLM) without it user must first open HTTP site for authentication. Honestly, I am worry about Kerio Control OS limitation and may there is some limitation for maximum users supports cause only 12 gigabyte of 96 gigabyte memory and 2% of two CPUs used. I know SSL inspection has high workload on CPU but in this scenario I don't see any high CPU usage.
Re: SSL Inspection problem [message #154628 is a reply to message #154435] Thu, 29 June 2023 14:44 Go to previous message
tverweij is currently offline  tverweij
Messages: 86
Registered: March 2010
Location: Curacao
Wait for the SNORT3 update that is being tested internal at GFI at this moment - this update will scale the IPS over the available processors.

Further, go to "Content Filter", tab "Applications and Web Categories" and uncheck "Enable application awareness" to get more speed from Kerio.
Previous Topic: Kerio Control Box 3110
Next Topic: Kerio 9.4x
Goto Forum:
  


Current Time: Thu Sep 28 18:00:14 CEST 2023

Total time taken to generate the page: 0.07355 seconds