OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • English Forums »
  • Zenarmor (Sensei) »
  • Unsatisfactory TLS inspection.
« previous next »
  • Print
Pages: [1]

Author Topic: Unsatisfactory TLS inspection.  (Read 503 times)

yeraycito

  • Sr. Member
  • ****
  • Posts: 288
  • Karma: 18
    • View Profile
Unsatisfactory TLS inspection.
« on: November 05, 2024, 05:37:30 pm »
I am testing the SSE version of Zenarmor and I am having problems accessing various websites of different types with TLS inspection enabled. There are times when it works fine but suddenly it stops loading the page and you can not access, to access that particular website you have to wait a few minutes trying again and then it is allowed, meanwhile you can not access any other website because the same thing happens. When the above is solved for a while everything works normally but soon happens again. When not being able to access the browser gives DNS error but I doubt very much that this is the problem.

Logged

almodovaris

  • Sr. Member
  • ****
  • Posts: 318
  • Karma: 15
    • View Profile
Re: Unsatisfactory TLS inspection.
« Reply #1 on: November 05, 2024, 08:45:37 pm »
I think that is due to blocking QUIC. Chromium-based  browsers seem not to like that.
Logged
OPNsense HW:

Minisforum Venus series UN100C, 16 GB RAM, 512 GB SSD
T-bao N9N Pro, 16 GB RAM, 512 GB SSD

IHK

  • Full Member
  • ***
  • Posts: 108
  • Karma: 5
    • View Profile
Re: Unsatisfactory TLS inspection.
« Reply #2 on: November 06, 2024, 07:29:05 am »
Does this happen again when you clear Chrome's DNS cache?

chrome://net-internals/#dns
Logged

Greg_E

  • Sr. Member
  • ****
  • Posts: 342
  • Karma: 19
    • View Profile
Re: Unsatisfactory TLS inspection.
« Reply #3 on: November 06, 2024, 03:33:55 pm »
Is the time on the firewall correct? Also time on the clients? Not sure if that is an issue, but worth checking.
Logged

yeraycito

  • Sr. Member
  • ****
  • Posts: 288
  • Karma: 18
    • View Profile
Re: Unsatisfactory TLS inspection.
« Reply #4 on: November 06, 2024, 04:45:14 pm »
Quote from: IHK on November 06, 2024, 07:29:05 am
Does this happen again when you clear Chrome's DNS cache?

chrome://net-internals/#dns



The same thing keeps happening.
Logged

IHK

  • Full Member
  • ***
  • Posts: 108
  • Karma: 5
    • View Profile
Re: Unsatisfactory TLS inspection.
« Reply #5 on: November 06, 2024, 07:10:40 pm »
Quote from: yeraycito on November 06, 2024, 04:45:14 pm
Quote from: IHK on November 06, 2024, 07:29:05 am
Does this happen again when you clear Chrome's DNS cache?

chrome://net-internals/#dns



The same thing keeps happening.

Can you share the logs and configuration by following the instructions in the link below so that we can make a detailed review?
I ask you to tick all the options.
 

https://www.zenarmor.com/docs/support/reporting-bug
Logged

yeraycito

  • Sr. Member
  • ****
  • Posts: 288
  • Karma: 18
    • View Profile
Re: Unsatisfactory TLS inspection.
« Reply #6 on: November 07, 2024, 06:55:30 pm »
feedback sendt.
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • English Forums »
  • Zenarmor (Sensei) »
  • Unsatisfactory TLS inspection.
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2024 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2