RE: RE: Slow Browsing via 500 Pix firewall [7:74583]
this may be silly but did you do a "sho debug" to see if any debugs were running? I had accidentally left a debug crypto ipsec running after trouble shooting a vpn. that drastically slowed down everything. -Original Message- From: Mark To: [EMAIL PROTECTED] Sent: 9/3/2003 8:46 PM Subject: Re: RE: Slow Browsing via 500 Pix firewall [7:74583] Is the problem related to a slow initial connection to a Web Server? If so then it could be an IDENT protocol problem (TCP port 113 connection coming back to you from the server). Try putting "service resetoutside" on the PIX and see if the problem still persists. Mark CCIE R&S, Security Lab Technician GigaVelocity.com - Original Message - >From: "Jurkouich, Brett, CNTR, DCAA" >Reply-To: "Jurkouich, Brett, CNTR, DCAA" >To: [EMAIL PROTECTED] >Subject: RE: Slow Browsing via 500 Pix firewall [7:74583] >Date: Tue, 2 Sep 2003 18:20:06 GMT > >Try turning off the port 80 inspecting with the "no fixup protocol http >80" command > >-Original Message- >From: Faisal [mailto:[EMAIL PROTECTED] >Sent: Monday, September 01, 2003 1:38 AM >To: [EMAIL PROTECTED] >Subject: Slow Browsing via 500 Pix firewall [7:74583] > > >Hi All, >I am having problem of slow or interminnent browsing through pix >firewall. If I bypass the traffic speeds are fine. But if all that >traffic is going via firewall then it becomes extremely slow. Please >anybody can help me how to sort this out. > >Regards >Faisal >**Please support GroupStudy by purchasing from the GroupStudy Store: >http://shop.groupstudy.com FAQ, list archives, and subscription info: >http://www.groupstudy.com/list/cisco.html >**Please support GroupStudy by purchasing from the GroupStudy Store: >http://shop.groupstudy.com >FAQ, list archives, and subscription info: >http://www.groupstudy.com/list/cisco.html **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=74784&t=74583 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Re: RE: Slow Browsing via 500 Pix firewall [7:74583]
Is the problem related to a slow initial connection to a Web Server? If so then it could be an IDENT protocol problem (TCP port 113 connection coming back to you from the server). Try putting "service resetoutside" on the PIX and see if the problem still persists. Mark CCIE R&S, Security Lab Technician GigaVelocity.com - Original Message - >From: "Jurkouich, Brett, CNTR, DCAA" >Reply-To: "Jurkouich, Brett, CNTR, DCAA" >To: [EMAIL PROTECTED] >Subject: RE: Slow Browsing via 500 Pix firewall [7:74583] >Date: Tue, 2 Sep 2003 18:20:06 GMT > >Try turning off the port 80 inspecting with the "no fixup protocol http >80" command > >-Original Message- >From: Faisal [mailto:[EMAIL PROTECTED] >Sent: Monday, September 01, 2003 1:38 AM >To: [EMAIL PROTECTED] >Subject: Slow Browsing via 500 Pix firewall [7:74583] > > >Hi All, >I am having problem of slow or interminnent browsing through pix >firewall. If I bypass the traffic speeds are fine. But if all that >traffic is going via firewall then it becomes extremely slow. Please >anybody can help me how to sort this out. > >Regards >Faisal >**Please support GroupStudy by purchasing from the GroupStudy Store: >http://shop.groupstudy.com FAQ, list archives, and subscription info: >http://www.groupstudy.com/list/cisco.html >**Please support GroupStudy by purchasing from the GroupStudy Store: >http://shop.groupstudy.com >FAQ, list archives, and subscription info: >http://www.groupstudy.com/list/cisco.html **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=74763&t=74583 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Re: RE: Slow Browsing via 500 Pix firewall [7:74583]
Is the problem related to a slow initial connection to a Web Server? If so then it could be an IDENT protocol problem (TCP port 113 connection coming back to you from the server). Try putting "service resetoutside" on the PIX and see if the problem still persists. Mark CCIE R&S, Security Lab Technician GigaVelocity.com - Original Message - >From: "Jurkouich, Brett, CNTR, DCAA" >Reply-To: "Jurkouich, Brett, CNTR, DCAA" >To: [EMAIL PROTECTED] >Subject: RE: Slow Browsing via 500 Pix firewall [7:74583] >Date: Tue, 2 Sep 2003 18:20:06 GMT > >Try turning off the port 80 inspecting with the "no fixup protocol http >80" command > >-Original Message- >From: Faisal [mailto:[EMAIL PROTECTED] >Sent: Monday, September 01, 2003 1:38 AM >To: [EMAIL PROTECTED] >Subject: Slow Browsing via 500 Pix firewall [7:74583] > > >Hi All, >I am having problem of slow or interminnent browsing through pix >firewall. If I bypass the traffic speeds are fine. But if all that >traffic is going via firewall then it becomes extremely slow. Please >anybody can help me how to sort this out. > >Regards >Faisal >**Please support GroupStudy by purchasing from the GroupStudy Store: >http://shop.groupstudy.com FAQ, list archives, and subscription info: >http://www.groupstudy.com/list/cisco.html >**Please support GroupStudy by purchasing from the GroupStudy Store: >http://shop.groupstudy.com >FAQ, list archives, and subscription info: >http://www.groupstudy.com/list/cisco.html Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=74694&t=74583 -- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html