Hight SSL Negotiation time, when web filter Security profile has enable
Hey Guys
We are facing Hight SSL Negotiation time, when WEB filter profile has enable on the rule at Security Profile.
When we disable de WEB Filter profile on the rule, the SSL Time improve considerable .
To test i'm using this curl command, for google website. But this issue occur with any destination address
curl —resolve www.google.com.br:443:142.250.219.131 -w "DNS_resolution: %{time_namelookup}| TCP_negotiation_time: %{time_connect}| SSL_negotiation_time: %{time_appconnect}| TTFB: %{time_starttransfer}| Total time: %{time_total} \n" -o /dev/null -vsL https://www.google.com.br
When WEB Filter profille is enable the SSL_negotiation_time is more 3 seconds
When WEB Filter profile is disabled the SSL_negotiation_time is not more tham milliseconds
When I check on System ==> Fortiguard My Web Filter Status is average 123 ms.
Someone experienced this same issue ?
