Maximum SSL session cache size for SGOS

Products

• Advanced Secure Gateway Software - ASG
• ProxySG Software - SGOS
• SWG VA-100

Issue/Introduction

You want to know the maximum value that can be set as the SSL session cache size via the hidden CLI command "#(config ssl)set-session-cache_size".

This command is applicable for Edge SWG (formerly ProxySG) and, ASG (Advanced Secure Gateway) products.

Resolution

The hidden CLI command "set-session-cache_size" has been added since SGOS 6.5.4.7. Regardless of the HW model / platform, the SSL session cache acceptable value can be configured as any value between 1 and 100,000. This is only available for versions starting as of SGOS 6.5.4.7 up to the following releases:

• SGOS 6.5.10.3
• SGOS 6.6.5.10
• ASG 6.6.5.10
• SGOS 6.7.1.3

As of the following releases, the SSL session cache acceptable value has been modified to between 1 and 1,000,000:

• SGOS 6.5.10.4
• SGOS 6.6.5.11
• ASG 6.6.5.11
• SGOS 6.7.2.1

Additional Information

Increasing the SSL session cache size on your appliance will utilize more memory(RAM). If necessary consult with BRCM support before increasing the overall SSL session cache size on your appliances.

To determine the default session cache size of our appliances, you can also refer to this article: TECH247146.