Support Center > Search Results > SecureKnowledge Details
No access to certain websites when HTTPS Inspection is enabled Technical Level
Symptoms
  • After enabling HTTPS inspection on R80.40, Google, Youtube, Facebook, and other websites may fail.

  • CRL Timeout found in WSTLSD process and $FWDIR/log/wstlsd.elg file shows:

    [wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: 173435104
    [wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: -1557002614
    [wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: 651385237
    [wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: 170933128
    [wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: 539828345
    [wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: 539828345
    [wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: 539828345
    [wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: 673930524
    [wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: 0
    [wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: 539828345
    [wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: 53982834
Cause
A CRL timeout causes slowness in HTTPS Inspection:

[wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: 173435104
[wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: -1557002614
[wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: 651385237
...
[wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: 0
[wstlsd ...]@GW[DATE TIME] cptls_Validation::CheckRevocation: called fwValidateRevocationA_e(). CRL validation flag: 1, rc: -1, crl timeout: 156470696
Solution
Note: To view this solution you need to Sign In .