Some downloads are slow when using the proxy

We created an exception for this domain so https decrypt and scanning is turned off.  Still no love.

Hi James Hood1,

Can you please check content scanning mode on the web protection by navigating to Web > General Settings > Protection > Malware and content scanning > Scanning mode and change it to real-time? Let us know if this change makes any difference?

Thanks,

Our scanning mode was already set to real time.

But either way, we made an exception rule for this domain so it isnt being decrypted or scanned.

Our scanning mode was already set to real time.

But either way, we made an exception rule for this domain so it isnt being decrypted or scanned.

Hi James Hood1,

Please share the screenshot of the exception that you have created for the domain. 

Thanks,

Web exception rule is above.

Hi @James Hood1

I have tested the link you have given here with full HTTPs decrypt and scan and web policies.  I am getting proper speeds.

Can you try create a test rule at the top with the source IP of your test machine and the same policies configured as your default rule.

Then try to access that site and review the logs for web filter, application filter and IPS.

You will need to sort the view by firewall rule ID or your source IP.  This will show anything being blocked by that IP.

If you have already created an exception to the URL, then the proxy should not come into play.

Can you DM me screenshots of your configuration for web proxy?

Are you using virtual SFOS or hardware based?

Thanks!

Its odd I cant find the executable in the logs, normally I can do that.

Searching for https://pdqinstallers in the logs shows nothing blocked.

After the pdqinstaller is downloaded, the other executables it downloads as part of its library download just fine.

I also made myself wide open on the proxy in addition making the web exception.

We are using a hardware based solution -  XG430 (SFOS 17.5.9 MR-9)

If you have a valid license, I would suggest opening a support case so that the techs can have a look at your logs with the service in debug.  If you are unable to find the download or URL in the log file, then its probably not hitting the proxy and is obeying your exception created.

Having the service in debug will show if its truly not hitting the proxy.

Please DM me the case number once done.

Thanks!