WSA IronPort S170 slow browsing for HTTPS sites

Felipe Guimaraes · ‎05-23-2015

Hello

We have a WSA S170 deployed in transparent mode using WCCP v2.

The appliance is already running the current AsyncOS version 8.5.2-027 for Web.

HTTP browsing is normal, and no noticeable delays. HTTP Proxy is working fine and majority of times speeding up the browsing experience.

The issue only occurs while browsing any HTTPS website. All Decryption Policies are already set to Pass Through. But the browsing experience is very slow. HTTPS Proxy supposed to speed up isn't it ?

Any ideas of what might be causing this slow response for HTTPS sites?

Thank You!

Felipe Guimaraes · ‎06-16-2015

UPDATE

With the help of the TAC team we figured out that the slow browsing was caused by the IPS inspection. We have placed the IPS (cisco IPS 4240) in bypass mode in order to further investigate the reason.