Securly - slow / unresponsive YouTube and Gmail

[gszech]

We are using Securly at our schools and YouTube performance is very slow. When the YouTube video is loading Securly Chrome addon is using 100% CPU, this goes for about 1 min and then the video loads.

We also noticed that typing emails in Gmail lags to the point where you can write a sentence and it takes 30s for it to appear. The Gmail issue only happens on Chromebooks and Windows devices with Chrome browser are not affected.

 

Uninstalling Securly Chrome addon solves both issues but it's not really a solution.

 

I just want to check if other schools are also affected and if there is a workaround for this ?

[speakercon]

Could you try whitelisting SSL inspection for the effected websites, see if that makes a difference?

[rogerdnixon]

Not experienced and we have a very large ChromeOS fleet. I'd try (if not already done) a user that only has the Securly extension pushed and nothing else - just in case thee is some interaction with another extension. Also just email support and they are normally right on it - give them a test user and they can try to reproduce the issue and figure out what's going on.

[sigma]

Could you try whitelisting SSL inspection for the effected websites, see if that makes a difference?

 

I'm not a Securely or Chromebook user, but have been building an SSL Inspection bypass list for other reasons. Here's a reference and extract. Adding some of these to an SSL inspection bypass list as appropriate may help:

 

Chromeos only https://support.google.com/chrome/a/answer/6334001?hl=en

 

 

For ChromeOS and Chrome Browser Cloud Management devices to work on a domain with TLS inspection (also known as SSL inspection), some hostnames need to be exempt from inspection. This is because certificates can only be imported at the user level and are only honored for user-level traffic. Some device-level traffic doesn’t use the TLS or SSL certificate to protect users against certain kinds of security risks.

 

To ensure that devices work with TLS inspection or networks restricting external traffic, you need to allow the following hostnames on your proxy server.

 

Hostname allowlist for all ChromeOS and Chrome Browser Cloud Management devices

 

*.1e100.net1

accounts.google.com

accounts.google.[country]2

accounts.gstatic.com

accounts.youtube.com

alt*.gstatic.com3

chromeos-ca.gstatic.com

chromeosquirksserver-pa.googleapis.com

clients1.google.com

clients2.google.com

clients3.google.com

clients4.google.com

clients2.googleusercontent.com

cloudsearch.googleapis.com

commondatastorage.googleapis.com

cros-omahaproxy.appspot.com

dl.google.com

dl-ssl.google.com

enterprise-safebrowsing.googleapis.com

firebaseperusertopics-pa.googleapis.com

*.googleusercontent.com

*.gvt1.com

gweb-gettingstartedguide.appspot.com

m.google.com

mtalk.google.com

omahaproxy.appspot.com

pack.google.com

policies.google.com

printerconfigurations.googleusercontent.com

safebrowsing-cache.google.com

safebrowsing.google.com

safebrowsing.googleapis.com

sb-ssl.google.com

scone-pa.clients6.google.com

ssl.gstatic.com

storage.googleapis.com

tools.google.com

http://www.googleapis.com

http://www.gstatic.com

youtubeeducation.com

[rogerdnixon]

None of that is required with Securly.

[adamsund]

I use Securly at 3 of my schools and we have no issues like you’re describing. I’d contact their support, or look at it being an environment issue.

[gszech]

I use Securly at 3 of my schools and we have no issues like you’re describing. I’d contact their support, or look at it being an environment issue.

 

Thanks for your reply. It's interesting to see that this is not affecting everyone. I've already contacted their support three times. 2/3 tickets were parked saying that they are aware of the issue and they are working on a solution.

Yesterday Securly told me that they are working on a new extension:

 

"Below is a beta version of an extension we are testing to resolve some other issues. I would recommend rolling it out to a single device and see if the problem persists before rolling it out to all devices. The extension ID is knneimmpeamikmjijmnhjmmobddleohjThe Custom URL https://extensions.securly.com/extensions.xml "

 

 

I've tried it and YouTube was a bit better, but Gmail is just unusable. It's very weird as it's only the window where you type in email content is lagging. Everything else like searching / navigating Gmail works.