securing CE565 on PIX firewall outside zone

[rlourenco]

Hi,

I have a Content Engine 565 in a transparent caching with a cisco 2651XM which is an Internet access router. The CE is also doing proxy caching for HTTP, HTTPS and FTP. To protect the CE, due to fact that it has a public IP address, I configured CBAC on the router. Everything seemed to work fine but after a while the service (Internet service) started to degrade. After removing the CBAC configuration from the router things became well again. The router seems to have enough memory and processing power to deal with the CBAC feature.

Has anyone tried this kind of configuration?

Has anyone a different suggestion to protect the CE?

Thanks,

Ricardo

[didyap]

Do you also have CEF enabled? If so, can you turn off CEF and try. I have seen this cause some strange issues. If it does not work, then try removing CBAC and adding it back.