Description

SRX is not receiving SSL client hello packets.

Symptoms

  • No SSL hello received.
  • TCP sessions ending after completing 3-way handshake.

Solution

User is unable to communicate with an internal server over applications defined for TCP port 8080 and 8085.

 

Communication should be done over SSL. SRX is not seeing client SSL hello packets.

 

Issue was that the hello packets were jumbo sized, MTU on the SRX was default to 1500. We increased the MTU to allow jumbo frames and connectivity got restored.

Modification History

2023-11-25 : Article Created
2/6/2024: Formatting corrections made