An issue was fixed where the firewall dropped fragmented TLS
ClientHello packets, which blocked access to certain websites. This
occurred because the packets arrived truncated, in varying sizes and
orders, and the firewall's heuristics failed to handle them
correctly.
To enable this fix, run: debug dataplane set ssl-decrypt
accumulate-client-hello disjoined yes.
|