ASA 5510 HTTPS Filtering Bog Down

rongeiser — Mon, 11 Mar 2019 22:31:01 GMT

I am running a Cisco ASA 5510 with Trend Micro Interscan. We have it set up to filter https except for a handful of sites. It is filtering the ones we don't want ie: facebook, and youtube. Though it is causing all other https to slow to a crawl. Therefore some sites it times out on us. What should we be looking for to change so it isn't slowing the allowed sites down?

Version numbers

ASA - 8.4(3)

ASDM - 6.4(3)

Trend - 6.6.1125

ASA 5510 HTTPS Filtering Bog Down

mirober2 — Wed, 29 Feb 2012 21:16:23 GMT

Hi Ron,

A couple of basic things to check:

1. The ASA's inspection policy should not be configured to match traffic from the CSC module's management IP address

2. The policy should also not match any traffic other than the protocols you want to filter

3. None of the CSC module's debug logs should be enabled

4. The ASA should not send more traffic to the CSC module than it can handle:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/prod_white_paper0900aecd805c3cd6.html

If the above suggestions don't help, I would suggest opening a TAC case to have this investigated further.

-Mike

topic ASA 5510 HTTPS Filtering Bog Down in Network Security

ASA 5510 HTTPS Filtering Bog Down

ASA 5510 HTTPS Filtering Bog Down