topic Re: Delayed server HTTP (JSP) response through PIX in Network Security

Delayed server HTTP (JSP) response through PIX

pavlosd — Fri, 21 Feb 2020 08:12:25 GMT

Hi,

we recently connected through extranet (leased line) with a partner, to use a web based application written with java servlet applets. We got complaints from our users that the time for pages to load is very long. We did some latency invastigation and capacity usage, but the network was responding fast. We added a PC in fron of the PIX firewall and we found out that the PC, loads the pages very fast. Behind the Firewall, PC is too slow. Other network applications (ping, telnet, ftp) are fast enough as expected.

Anyone faced a similar problem? We are running version 7.0(1), with no http inspection and with no NAT!

Re: Delayed server HTTP (JSP) response through PIX

akusuma1 — Mon, 16 Jan 2006 15:35:57 GMT

Any idea or info how to resolve the problem ?

Re: Delayed server HTTP (JSP) response through PIX

malbo — Thu, 16 Mar 2006 18:53:30 GMT

I am having the same issue with web browsing being slow through the pix. I am running 7.0(4) code and we are doing http inspection because we use Websense, but memory(~130 of 256MB) and cpu(~4%) resources do not seem to be over-utilized in any way. Bandwidth also does not seem to be an issue since we use approx. 30-50% of our cappactity.

Did you get an answer to your issue?

Re: Delayed server HTTP (JSP) response through PIX

pavlosd — Wed, 22 Mar 2006 13:57:21 GMT

The problem was a combination of MTU and "faulty" Ethernet CAT 5 Cable....

You need to make sure that ICMP (unreachable messages) is allowed for HTTP Server to negotiate TCP MSS with client.

The other part of the problem is that we used a cat5 cable rather than a cat5e for the server so we did had a lot of Link Errors

Hope this helps...