Hi DamianRC   Your categorization engine may be failing to update and rolling back to factory settings.  When the WBRS engines fails to update properly, it rolls back to factory and re-downloads all definitions.  Get your TAC case open and we can loo...

What version of AsyncOS are you running?  There are some versions with a defect that causes the WSA to incorrectly hold onto these connections.

Try setting the "Decrypt for authentication" option in the HTTPS Proxy settings.

Sakun, The WSA supports up to TLS 1.0.  If the server requires a higher version (ex. TLS 1.2), you will need to create a decryption policy with a custom category to passthrough the HTTPS traffic for that domain. Hope this helps.

Do you have range requests enabled?  By default this is turned off on the WSA.  Enabling range requests allows the WSA to honor the client's range request and download the file in chunks.  Otherwise, the WSA will strip the range request header and do...