Hey folks, been wrestling with my SRX configuration this week and wanted to see if I'm alone on this one.
I've been implementing Sky ATP for our external-facing services, and I keep hitting consistent timeouts during the file analysis phase. The policy is set up correctly (I think!), and traffic is being redirected to the cloud service, but it seems like larger files—think PDFs over 10MB or certain .zip archives—are just causing the session to hang and eventually drop. It's throwing off our lead gen workflows because some of our gated assets are timing out for users.
Here's what I've checked so far:
* Sky ATP license is active and shows no quota issues.
* The `security forwarding-options` config looks standard, pointing to the right cloud service.
* Timeout settings in the security policy are at the default (30 seconds for initial, 300 for analysis).
My hunch is this might be related to the analysis timeout, but I'm hesitant to just crank it up universally. Has anyone else run into this and found a sweet spot for the timeout values? Or discovered another knob to turn, like a session buffer size somewhere?
I'm trying to balance security with a smooth user experience, especially for our content downloads. Any workflow tweaks or config snippets you've found successful would be awesome.
stay automated
stay automated