@cyber_monkey the answer to that is still valid: You need an external log storage solution, the little ring buffer on the appliance cannot keep up. --Michael@BWC (View Post)

@zizounet short answer, you can't because NAT is not SNI based. You need to get yourself a reverse proxy. --Michael@BWC (View Post)

@ckonrads according to the screenshot you need to use AES-256 (without any suffix), but you might struggle with the DH Group, because 15 is not supported by SNWL. DH Group 5 isn't accepted from the r… (View Post)

@Purconn in my (current) opinion (time will tell) I believe days are numbered for Security Services at the perimeter and we're going back to Router (with some bells and whistles) and strong Endpoint … (View Post)

@Arkwright HTTP/3 (QUIC) will put a nail in the coffin of DPI-SSL and probably most of the Security Services at the Perimeter. I'am not optimistic that it can be addressed properly via Proxy. --Micha… (View Post)