http not working properly

[aborres]

we have pix 525 with version 6.3(3), we have server installed in dmz network with www & ftp service running on it. just recently, we experience problem accessing the server using http from both inside and outside it take a lot of time to display a login screen but once you logged in the speed become normal. any help

[nkhawaja]

any syslog messages? output of "show conn count", "show xlat"

thanks

Nadeem

[Patrick Iseli]

Check your WebServer if he is doing name resolution of your web client IP's !!

If it is linux add in the /etc/hosts file your internal host IP with the name and see if that connection attempt is faster. Remove all name resolution in the WebServer to speed up the connections.

sincerely

Patrick

[nkhawaja]

I see a lot of UDP/53 connections just sitting idle. We had a bug on this issue. You first need to upgrade the code to a new release. then see if that helps.

thanks

Nadeem

[aborres]

Hi Nadeem,

Thanks for your reply, please check the attached file "show conn"..we are accessing 10.149.72.50 for ftp ok but http takes a lot of time to display login page..10.149.72.53 is our proxy server..

Thanks,

Ador

[jmia]

You have problems with DNS, do you use internal DNS servers or external?

Is all your http traffic being filtered via the proxy server, if yes, then check that the DNS is working correctly from your proxy server.

Jay