Cisco ACE 4710 TCP Normalization

[robert.horrigan]

I've run into so many issues with the ACE affecting TCP traffic - ie not allowing larger window files, disconnecting FTP sessions, etc.  Is there a way

to disable normalization all together and make the ACE act like a router that load balances?  If so can you

please provide a config example and what the issues would be with implementing this?

[litrenta · Accepted solution]

disabling normalization is done under the interface  with "no normalization"

The issues associated with doing this could be:

asymetric traffic would be allowed

connections could be opened with non-syn packets in the case of TCP

sequence numbers would not be randomized

[robert.horrigan]

Thanks!