Websense on PIX 515E slow

[mufunk]

I have an issue where CNN and a few other odd sites load exremely slow through a PIX (6.3(1)) that uses Websense 5.2. The pix is at a remote site with a T1, but there is very little other traffic on the pipe. I'm using UDP to communicate to the websense server. The local PIX on the same LAN as the websense box doesn't seem to have the issue. Websense claims it's the PIX... Anyone ever had this issue?

[msim1968]

can you post your configuration of websense on the pix

[broberso]

I have the exact same issue. I haven't found a workaround yet. Any progress on your end?

Brian

[mufunk]

I have went through all the hoops with Websense to include a 2 hour Ethereal packet capture session. Websense is now asking me to setup a conference call with them and Cisco to troubleshoot since all the responses to/from thier box are extrmely snappy and without any latency. I plan on doing it Monday, but it still seems odd that it only affects a handful sites and not all of them.

[mufunk]

I think I have found something that is making things a lot better... Try adding this to your pix config

url-block block 128 (The 128 is the buffer size)

Or read up on it here

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_command_reference_chapter09186a0080104256.html#1050733

[cscott]

If you still have problems add the following two commands:

url-block url-mempool 1500

url-block url-size 4

Make sure you have 1500kb of free RAM before you do this. Also, if you've got URL caching enabled on the PIX, see this page for a list of guidelines you should follow in Websense:

http://www.websense.com/support/knowledgebase/Display.php?faq=345&plat=all&key=〈=English