hi , After upgrading the fwsm from 2.3 to 3.1(3)some of the http application access from outside doesnt seems to be working.I had to turn off inspect HTTP to make it work. I was using Fixup http in 2.3 verion. All these applications are NATed outside and use cisco CSM Module for load balancing. Any idea to fix this. I am bit worried to turn off Inspect http as i think it disables the deep level application inspection which leaves my application vulnurable.
I hope when you enabled the inspection on http traffic,the cpu utilisation will be more for inspection.You can see it by using "show proc output" command.So,both are mutually exclusive from one another and it is safe to disable to http inspect.
Learn, share, save
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.