https://community.cisco.com/t5/network-security/web-services-not-working-with-firewall/m-p/2194740#M360387 <P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; we have instaled and implemented a FWSM on cisco catalyst 6509E and defined two virtual contexts.</P><P>one of contexts work as datacenter firewall. initially it is configured to allow all traffic to datacenter VLAN. (permit any any)</P><P></P><P>on test, it worked fine, except for one problem: all web services had degradation in performance, all server-client (non web) services worked very fine. additionally all https servies worked well.</P><P></P><P>this was very confusing, becasue users connect to the web server bypassing the proxy, web services are expected to act just like other ones.</P><P></P><P>Does any one have an idea?</P> Tue, 12 Mar 2019 01:13:02 GMT haneenkhcc 2019-03-12T01:13:02Z https://community.cisco.com/t5/network-security/web-services-not-working-with-firewall/m-p/2194740#M360387 <P>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; we have instaled and implemented a FWSM on cisco catalyst 6509E and defined two virtual contexts.</P><P>one of contexts work as datacenter firewall. initially it is configured to allow all traffic to datacenter VLAN. (permit any any)</P><P></P><P>on test, it worked fine, except for one problem: all web services had degradation in performance, all server-client (non web) services worked very fine. additionally all https servies worked well.</P><P></P><P>this was very confusing, becasue users connect to the web server bypassing the proxy, web services are expected to act just like other ones.</P><P></P><P>Does any one have an idea?</P> Tue, 12 Mar 2019 01:13:02 GMT https://community.cisco.com/t5/network-security/web-services-not-working-with-firewall/m-p/2194740#M360387 haneenkhcc 2019-03-12T01:13:02Z https://community.cisco.com/t5/network-security/web-services-not-working-with-firewall/m-p/2194741#M360388 <HTML><HEAD></HEAD><BODY><P>could be several things:</P><P>do you have inspect http enabled, are you close to the # of connections per second or throughput limits?</P><P>are packets out-of-order or fragmented and FWSM has to reassemble (show run all fragment to check)?</P><P></P><P>any logs or more details you can share?</P></BODY></HTML> Thu, 14 Mar 2013 04:19:43 GMT https://community.cisco.com/t5/network-security/web-services-not-working-with-firewall/m-p/2194741#M360388 Patrick Moubarak 2013-03-14T04:19:43Z