ENS doesn't allow network appliances to perform SSL inspection on rating requests to the Global Threat Intelligence (GTI) rating servers. An example of such network appliances includes an SSL-decrypting firewall or proxy. This behavior is as designed, to ensure security of the data transport and prevent man-in-the-middle attacks. If GTI rating requests are sent to an appliance that performs SSL inspection, the rating requests fail. If many rating request retries are caused by this failure, it might cause high CPU and memory use.
When this issue occurs,
gti_errors.log contains many instances of the following error:
10/30/18 15:05:48 [E] [0x47c4] HttpConnection::SendRequest invalid server certificate.
