Cisco ASA - Disable SQLnet inspection or increase buffer size?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-11-2012 11:35 PM - edited 03-11-2019 04:18 PM
Hi All,
We have a request from a customer who wants us to either turn off SQLnet inspection or increase the reassembly buffer size of 8K as per below. They have a Oracle database behind the firewall and are seeing connection drops.
"As per my understanding CISCO firewall has an SQLnet inspection feature which uses this buffer.
However, the packet reassembly buffer has a limit of 8 kbytes. I feel that many of the SQL queries might be bigger than this, and they would be
blocked and we would face the connection drop issue. Is there a way they can increase this reassembly buffer(not sure how big we would need) or make
it unlimited? If this is not possible can they disable this sqlnet inspection feature and we can check if connectivity issue happens? "
Could someone please point me to any document where I can turn off SQLnet Inspection on a source-to-destinaton flow (I don't want to turn if off globally). Alternatively, is there a way to increase the buffer size on the Cisco ASA. I haven't been able to find anything on google
Thanks.
Andy
- Labels:
-
NGFW Firewalls
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-22-2012 03:32 AM
Hi Bro
You could use the MPF method to achieve your requirements.
Ramraj Sivagnanam Sivajanam
