DPI-SSL logging
jst3751
Newbie ✭
In the connection failures, I see frequently external IPs attempting to connect to our web server in the DMZ and a connection failure is listed under DPI-SSL Client SSL Connection Failures as "server reset connection during handshake". The problem is there is no evidence of this in the syslog at all. The only thing being recorded in the syslog is "Connection Opened", "Packet allowed: matched Access Rule", "NAT Mapping", "DPI-SSL Inspection Cleaned-up" and "Connection Closed" for the IP address. (not necessarily in that order)
This becomes a real problem when we get a complaint from a customer saying they received a browser security error and I am trying to diagnose if it is a problem our our side or his side, but the logging information is incomplete.
NSA2600 HA pair running 6.5.4.6-79n
Answers
The 6.5.4.x releases is plagued with DPI-SSL issues. You might want to go back to 6.5.3.4
Unfortunatly there is an issue in 6.5.3.x that we were experiencing that required us to go to a newer version per Sonicwall support.