Delayed server HTTP (JSP) response through PIX

[pavlosd]

Hi,

we recently connected through extranet (leased line) with a partner, to use a web based application written with java servlet applets. We got complaints from our users that the time for pages to load is very long. We did some latency invastigation and capacity usage, but the network was responding fast. We added a PC in fron of the PIX firewall and we found out that the PC, loads the pages very fast. Behind the Firewall, PC is too slow. Other network applications (ping, telnet, ftp) are fast enough as expected.

Anyone faced a similar problem? We are running version 7.0(1), with no http inspection and with no NAT!

[akusuma1]

Any idea or info how to resolve the problem ?

[malbo]

I am having the same issue with web browsing being slow through the pix. I am running 7.0(4) code and we are doing http inspection because we use Websense, but memory(~130 of 256MB) and cpu(~4%) resources do not seem to be over-utilized in any way. Bandwidth also does not seem to be an issue since we use approx. 30-50% of our cappactity.

Did you get an answer to your issue?

[pavlosd]

The problem was a combination of MTU and "faulty" Ethernet CAT 5 Cable....

You need to make sure that ICMP (unreachable messages) is allowed for HTTP Server to negotiate TCP MSS with client.

The other part of the problem is that we used a cat5 cable rather than a cat5e for the server so we did had a lot of Link Errors

Hope this helps...