PIX interfering with web pages?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-04-2008 08:47 AM - edited 03-11-2019 05:12 AM
Hi, I'm running into a bizzare issue that i cannot pin down.
If i try to access www.nmh.org from outside of my PIX, it works fine. If I try from inside the PIX, reliability is about 5% that the page will ever show up. The website is pingable from inside, on a packet sniff from the browsing machine i see the inital handshake and a http Get command, the ack from the webserver, then [TCP Previous segment lost] Continuation or non-HTTP traffic.
I do not have these problems with any other site that I know of.
What should i look at next?
- Labels:
-
NGFW Firewalls
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-04-2008 03:27 PM
Have you tried
'fixup protocol http 80'
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-05-2008 07:53 AM
I already have "Fixup protocol http 80" configured on the box.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-05-2008 08:08 AM
Sorry I meant try:
no fixup protocol http 80
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-05-2008 09:58 AM
Thanks! I'll give that a try.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-06-2008 02:06 PM
Sorry That did not change anything.
Any other ideas?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-06-2008 03:23 PM
Hi
Are you able to give the software version, how long has the problem been there?
Regards MJ
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
03-06-2008 03:52 PM
could you try dropping your mtu on the outside interface and test again?
