topic HTTP inspection problem in Network Security https://community.cisco.com/t5/network-security/http-inspection-problem/m-p/1223289#M77677 <P>Hi, I have configured IOS Zone Based Firewall on my office 871 router. </P><P>I've made an inspection rules for http, https, icmp and dns for in-out zone. Often I can see in router log the message: </P><P></P><P>%APPFW-3-HTTP_MAX_REQ_EXCEEDED : Number of unanswered HTTP requests exceeded the limit 10. </P><P></P><P>I guess this is becouse there are about 7 people working simultaneously and some of them use skype, witch probably makes unanswered sessions. </P><P></P><P>However, i want to ask, is there some way to change the limit of 10 unanswered request? </P><P></P><P>Thanks in advance! </P><P></P> Sun, 10 Mar 2019 11:30:33 GMT zenon_electronics 2019-03-10T11:30:33Z HTTP inspection problem https://community.cisco.com/t5/network-security/http-inspection-problem/m-p/1223289#M77677 <P>Hi, I have configured IOS Zone Based Firewall on my office 871 router. </P><P>I've made an inspection rules for http, https, icmp and dns for in-out zone. Often I can see in router log the message: </P><P></P><P>%APPFW-3-HTTP_MAX_REQ_EXCEEDED : Number of unanswered HTTP requests exceeded the limit 10. </P><P></P><P>I guess this is becouse there are about 7 people working simultaneously and some of them use skype, witch probably makes unanswered sessions. </P><P></P><P>However, i want to ask, is there some way to change the limit of 10 unanswered request? </P><P></P><P>Thanks in advance! </P><P></P> Sun, 10 Mar 2019 11:30:33 GMT https://community.cisco.com/t5/network-security/http-inspection-problem/m-p/1223289#M77677 zenon_electronics 2019-03-10T11:30:33Z Re: HTTP inspection problem https://community.cisco.com/t5/network-security/http-inspection-problem/m-p/1223290#M77682 <HTML><HEAD></HEAD><BODY><P>This error message means firewall sees 10 outstanding requests without any reply over a single TCP connection. Normally this shouldn't happen unless you have huge delay in the network or the HTTP server is very slow in responding to the request.</P><P></P></BODY></HTML> Fri, 20 Feb 2009 14:45:29 GMT https://community.cisco.com/t5/network-security/http-inspection-problem/m-p/1223290#M77682 ivillegas 2009-02-20T14:45:29Z Re: HTTP inspection problem https://community.cisco.com/t5/network-security/http-inspection-problem/m-p/1223291#M77683 <HTML><HEAD></HEAD><BODY><P>Thanks for reply!</P><P></P><P>I understand what the error message means, but I don't know how to prevent it.</P><P></P><P>I'm sure that it's NOT from the network delay or internet connection speed (ADSL - 12Mb/s). </P><P></P><P>I need to increase the limit number of 10 unopened connections. Is this possible?</P><P></P><P>Thanks!</P><P></P></BODY></HTML> Fri, 20 Feb 2009 16:02:01 GMT https://community.cisco.com/t5/network-security/http-inspection-problem/m-p/1223291#M77683 zenon_electronics 2009-02-20T16:02:01Z Re: HTTP inspection problem https://community.cisco.com/t5/network-security/http-inspection-problem/m-p/1223292#M77684 <HTML><HEAD></HEAD><BODY><P>What version of IOS do you use now?</P></BODY></HTML> Sat, 21 Feb 2009 06:19:42 GMT https://community.cisco.com/t5/network-security/http-inspection-problem/m-p/1223292#M77684 sadsiddi 2009-02-21T06:19:42Z Re: HTTP inspection problem https://community.cisco.com/t5/network-security/http-inspection-problem/m-p/1223293#M77685 <HTML><HEAD></HEAD><BODY><P>my version of IOS is 12.4(15)T with Advanced Ip services, and i've configured a Zone-Based-Firewall </P></BODY></HTML> Sat, 21 Feb 2009 12:18:35 GMT https://community.cisco.com/t5/network-security/http-inspection-problem/m-p/1223293#M77685 zenon_electronics 2009-02-21T12:18:35Z Re: HTTP inspection problem https://community.cisco.com/t5/network-security/http-inspection-problem/m-p/1223294#M77686 <HTML><HEAD></HEAD><BODY><P>The limit is raised to 64 in 12.4(20)T.You can give a try with that.</P></BODY></HTML> Sat, 21 Feb 2009 12:46:26 GMT https://community.cisco.com/t5/network-security/http-inspection-problem/m-p/1223294#M77686 sadsiddi 2009-02-21T12:46:26Z Re: HTTP inspection problem https://community.cisco.com/t5/network-security/http-inspection-problem/m-p/1223295#M77687 <HTML><HEAD></HEAD><BODY><P>Thank you very much, I'll try it next week and i hope that will helps me..</P></BODY></HTML> Sat, 21 Feb 2009 14:49:40 GMT https://community.cisco.com/t5/network-security/http-inspection-problem/m-p/1223295#M77687 zenon_electronics 2009-02-21T14:49:40Z Hi, https://community.cisco.com/t5/network-security/http-inspection-problem/m-p/1223296#M77688 <P>Hi,</P> <P>I also have the some problem.</P> <P></P> <P>I have: c1841-advsecurityk9-mz.124-4.T7.bin - Version 12.4(4)T7</P> <P>ROM: System Bootstrap, Version 12.4(13r)T, RELEASE SOFTWARE (fc1)</P> <P></P> <P>I have to upgrade IOS?</P> <P></P> <P>Thanks in advance!</P> Thu, 04 Feb 2016 17:39:45 GMT https://community.cisco.com/t5/network-security/http-inspection-problem/m-p/1223296#M77688 Henry Gonzales 2016-02-04T17:39:45Z