PIX Half open connections

[peterson.dave]

I have a 515 running 6.3(1) DMV 3.0(1)

Every once in awhile one of our subnets will not be able to access the web. We can ping and resolve DNS fine. However when you open a web browser it can't resolve the page.

This leads me to believe we may have Half open connections? Has anyone else run into this problem before? We only lose web browsing for maybe 10 mins each time.

Will upgrading the code help fix this? Do you know of a good white paper on PIX half open connections?

Thanks,

Dave

[mpalardy]

Dave,

Have you take a look to the connections on the pix w the show conn command. Flags on the connection to the web server may indicated an error.

Please see flags significations on:

http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_sw/v_63/cmdref/s.htm#wp1187542

Mike