PIX DMZ IS SLOW!

[chevyss]

Hello all,

I am having a problem with the dmz on the PIX. All connections to the DMZ from the outside work correctly.

However when I try to access our webserver on the DMZ from the inside.. Everything slows to a crawl. It can take up to 3-5 minutes to load a web page where on the outside it takes only 1-2 seconds.

Im not sure where to look for this problem at..

any ideas would be helpfull..

Thanks,

Seann

[tohuang]

Hi ,

You probably want to upload the config for further troubleshoot.

Tony

[rgrcommo]

sounds like your going from inside to outside back to DMZ then.

Should be from inside straight to DMZ. So, you need a static and an ACL to permit traffic from a lower to a higher interface just to be safe. – Only if you want DMZ traffic starting the connection to the “inside”

Do a "debug icmp trace" on the pix. Then on an inside host go to the www addr - then look at the pix on another window side-by-side and see where the PIX is routing the packet.

Jeff