Certain websites page (or a section of it) cannot be displayed in an Active Inline deployment mode. SSL Session Log shows "Packet feedback timeout".
Access to these sites are known to be working fine without the SSL Visibility (SSLV) appliance in place. If the affected site cannot be accessed even without the SSLV or not deployed in Active Inline mode, this article is not applicable.
In an Active Inline deployment mode, if the amount of time it takes for a decrypted packet to pass through the Attached-Appliance device and return to the SSLV exceeds 1 second, it could cause SSL flows to time out. This causes a general "Page cannot be displayed" error on the web browser.
SV 3.8.4 introduced a new "Feedback Timeout" setting which determines how long the SSL Visibility Appliance waits for a response before canceling a request and interrupting the SSL flow.
Changing the Feedback Timeout from Default to Extended under Policies > Segments > Appliance Feedback Options > Feedback Timeout will increase the timeout from 1 second to 5 seconds. It allows up to 5 seconds for a packet to get through the Attached-Appliance and return to the SSLV before failing with a Packet feedback timeout error.
The Default timeout is 1 second. The Extended timeout is 5 seconds.
From SV 3.8.4 Release Notes :
Feedback Timeout Setting: SSLV 3.8.4 supports a new loopback feedback timer. The new Appliance Feedback Options panel replaces the Plaintext Marker panel on the Segments window.
Feedback Timeout is a new setting in that panel, which determines how long the SSL Visibility Appliance waits for a response before canceling a request and interrupting the SSL flow.
Selecting the Extended timeout allows a more time-consuming request, such as one to the cloud, to complete. The Default is 1 second. The Extended period is 5 seconds.
Imported Document ID: 000027711
Subscribing will provide email updates when this Article is updated. Login is required.
Thanks for your feedback. Let us know if you have additional comments below. (requires login)
Subscribed to the Article.
Unable to subscribe
Thanks for your additional feedback !!!
Enterprise Support Virtual Agent
Rate Me :
Tell us more:
Welcome! My name is Sami, the Enterprise Support Virtual Agent answering technical support questions.