06-14-2005 05:55 AM - edited 02-21-2020 12:12 AM
Hi,
we recently connected through extranet (leased line) with a partner, to use a web based application written with java servlet applets. We got complaints from our users that the time for pages to load is very long. We did some latency invastigation and capacity usage, but the network was responding fast. We added a PC in fron of the PIX firewall and we found out that the PC, loads the pages very fast. Behind the Firewall, PC is too slow. Other network applications (ping, telnet, ftp) are fast enough as expected.
Anyone faced a similar problem? We are running version 7.0(1), with no http inspection and with no NAT!
01-16-2006 07:35 AM
Any idea or info how to resolve the problem ?
03-16-2006 10:53 AM
I am having the same issue with web browsing being slow through the pix. I am running 7.0(4) code and we are doing http inspection because we use Websense, but memory(~130 of 256MB) and cpu(~4%) resources do not seem to be over-utilized in any way. Bandwidth also does not seem to be an issue since we use approx. 30-50% of our cappactity.
Did you get an answer to your issue?
03-22-2006 05:57 AM
The problem was a combination of MTU and "faulty" Ethernet CAT 5 Cable....
You need to make sure that ICMP (unreachable messages) is allowed for HTTP Server to negotiate TCP MSS with client.
The other part of the problem is that we used a cat5 cable rather than a cat5e for the server so we did had a lot of Link Errors
Hope this helps...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide