OPNsense Forum

English Forums => Zenarmor (Sensei) => Topic started by: yeraycito on November 05, 2024, 05:37:30 PM

Title: Unsatisfactory TLS inspection.
Post by: yeraycito on November 05, 2024, 05:37:30 PM
I am testing the SSE version of Zenarmor and I am having problems accessing various websites of different types with TLS inspection enabled. There are times when it works fine but suddenly it stops loading the page and you can not access, to access that particular website you have to wait a few minutes trying again and then it is allowed, meanwhile you can not access any other website because the same thing happens. When the above is solved for a while everything works normally but soon happens again. When not being able to access the browser gives DNS error but I doubt very much that this is the problem.

Title: Re: Unsatisfactory TLS inspection.
Post by: almodovaris on November 05, 2024, 08:45:37 PM
I think that is due to blocking QUIC. Chromium-based  browsers seem not to like that.
Title: Re: Unsatisfactory TLS inspection.
Post by: IHK on November 06, 2024, 07:29:05 AM
Does this happen again when you clear Chrome's DNS cache?

chrome://net-internals/#dns
Title: Re: Unsatisfactory TLS inspection.
Post by: Greg_E on November 06, 2024, 03:33:55 PM
Is the time on the firewall correct? Also time on the clients? Not sure if that is an issue, but worth checking.
Title: Re: Unsatisfactory TLS inspection.
Post by: yeraycito on November 06, 2024, 04:45:14 PM
Quote from: IHK on November 06, 2024, 07:29:05 AM
Does this happen again when you clear Chrome's DNS cache?

chrome://net-internals/#dns



The same thing keeps happening.
Title: Re: Unsatisfactory TLS inspection.
Post by: IHK on November 06, 2024, 07:10:40 PM
Quote from: yeraycito on November 06, 2024, 04:45:14 PM
Quote from: IHK on November 06, 2024, 07:29:05 AM
Does this happen again when you clear Chrome's DNS cache?

chrome://net-internals/#dns



The same thing keeps happening.

Can you share the logs and configuration by following the instructions in the link below so that we can make a detailed review?
I ask you to tick all the options.


https://www.zenarmor.com/docs/support/reporting-bug
Title: Re: Unsatisfactory TLS inspection.
Post by: yeraycito on November 07, 2024, 06:55:30 PM
feedback sendt.