PIX 7.0 - Unaccessible websites

[gaetan.allart]

Hi,

Could any of you, supposed you are behind a PIX 7.0 firewall, try to access this website : http://193.24.213.215:8000

When I'm behind the PIX 7.0, I get a "Error 502 - Server unexpectedly closed connection. " but if I'm directly connected to the company network, I can easily access this website without any problem...

Thanks for your help,

[joshua.lindsay]

Are you allowing all TCP traffic out? Your url is going out port 8000. Not the normal port 80 for web traffic.

[itchampnz]

Pix 7 can also interfere with certain Java, there are some other posts on this forum about that....

[gaetan.allart]

There's no java on this webpage... Connecting to this server on other web applications on other ports pops the same problem up.

I think there may be something to change in TCP inspection even if I did not activate HTTP inspection :\

[joshua.lindsay]

I am using pix 7.0 and can get to the website no problem.

[gaetan.allart]

Maybe could I have a look at your configuration ?

[gaetan.allart]

Yes of course all traffic out is allowed. Access-lists are all right :)

[jackko]

just wondering which version is the pix running. if not running v7.0.4, then it's worth to upgrade to it.

i had couple issues with v7.0.2, which doesn't allow pinging the internet or browsing. the issue was resolved with v7.0.4.

[gaetan.allart]

I'm running v7.0(4)

[jackko]

odd.

http://193.24.213.215:8000 opens when my notebook is connected to pix501 v.6.3

http://193.24.213.215:8000 doesn't open when my notebook is connected to asa v7.0.4.

i was thinking that port 8000 needs to be added as the http inspection. but then the odd thing is:

http://193.24.213.215:8000 opens when my notebook is connected to pix515e v7.0.4.

both pix515e and asa run the same os, as well as the default inspection rules on http.

[gaetan.allart]

Oh là là... I'll have a look at the http inspection but right now, I'm a bit confused about all this stuff :\

[prasadrp]

Can you check this link

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00804c8b9f.shtml

Might be you are bumping in to this issue.

[gaetan.allart]

I already know this link. I trie out to create a mss-exceeded tcp-map but this does not work.

I don't really know where it can come from :\