Note that there is a performance impact when using the SSL decryption feature. If there is a lot of outbound SSL traffic from the client to the internet, it consumes SSL flows. Therefore, to enable the Sensor to effectively utilize the SSL decryption feature, it is recommended to bypass these outbound SSL traffic using ACL Ignore rules.
Refer to the following sections for the SSL throughput measurements and test methodologies.
Note
SSL decryption feature is not supported on NS3500, NS3200, and NS3100 Sensor models.
Note
Proxy based SSL decryption feature is not supported on VM5000 and VM600 Sensor models.