Intrusion Prevention
Highlighted
Intrusion Prevention

IDP 250 SSL inspection CPU

‎09-26-2014 06:52 AM
Hi experts,

We are planning to implement SSL inspection with server private key.(Inbound SSL decryption) on a IDP 250 dual core.

The device is quite transited 9000 tcp sessions
on average.

IDP 250 is in transparent mode now.

Can IDP decrypt SSL in transparent mode?


Our concerns are about CPU usage when processing the SSL traffic.

Had somebody implemented this in production or tested in a lab?

How much CPU usage should we expect for processing 1300 SSL sessions?

Right now scio idp-cpu-utilization shows under 20% utilization.



Thanks for your help.



2 REPLIES 2
Highlighted
Intrusion Prevention

Re: IDP 250 SSL inspection CPU

‎09-28-2014 03:41 PM
Nobody used IDP for SSL decryption?
Highlighted
Intrusion Prevention

Re: IDP 250 SSL inspection CPU

‎03-13-2017 10:54 AM

Hello,

 

CPU utilization will depend upon many factors like overall traffic profile on the IDP, the IDP signatures used ( Recommended or all signatures ), as well as the ciphers used for the ssl. Its difficult to tell directly how much CPU utilization will be taking place.

 

Regards

Vatsa