Optimizing the performance of HTTPS filtering

The SSL proxy on the SNS firewall consumes a significant amount of memory. It allocates three sockets and four memory buffer zones to each HTTPS connection. TLS connections also require memory to manage cryptography and fake certificates.

The SSL proxy, like other SNS modules, can use only a limited amount of the firewall's memory. This is because memory is shared in such a way to allow all modules to run simultaneously.

If you notice memory issues while using the SSL proxy, check its parameters and perform the optimizations that Stormshield has recommended.