High load and Latency detected in a routed SSL Visibility and routed ProxySG configuration.

Products

• SV-3800
• SV-2800
• SSL Visibility Appliance Software
• SV-1800
• SV-800

Issue/Introduction

Customer may experience high load condition on the SSL Visibility appliance and may receive reports of latency when utilized in a routed ProxySG topology.

Environment

Their deployment would consist of multiple routed ProxySG devices connected to the SSL Visibility appliance through one or more switches, enabling offloading of SSL decryption from the ProxySG devices to the SSL Visibility appliances.

Cause

This may be related to a possible configuration error.  

Resolution

In this type of topology, we often see only one of the interfaces configured on the SSL Visibility Appliance.  In a multi-routed ProxySG topology we require that both interfaces be configured on the SSL Visibility Appliance.  Each interface should be configured with the same serial number of the box it is configured on.  Additional details can be found on this from within the SSL Visibility Admin Guide within the Multi-Routed ProxySG Deployments section.