Check_Point
156-582 · Question #44
After enabling HTTPS Inspection, some sites load slowly and some fail during handshake. CPU and RAM are low. Most likely cause?
The correct answer is D. SNI parsing failure. Most failures happen because the gateway cannot extract hostname from SNI. Fix with: fw ctl debug -m fw + tls
Troubleshooting Threat Prevention
Question
After enabling HTTPS Inspection, some sites load slowly and some fail during handshake. CPU and RAM are low. Most likely cause?
Options
- ACertificate chain length
- BWrong TLS fallback
- CLow entropy
- DSNI parsing failure
How the community answered
(51 responses)- A10% (5)
- B4% (2)
- C14% (7)
- D73% (37)
Explanation
Most failures happen because the gateway cannot extract hostname from SNI. Fix with: fw ctl debug -m fw + tls
Topics
#HTTPS Inspection#SNI parsing#TLS handshake#certificate
Community Discussion
No community discussion yet for this question.