IP Inspect Issue

[thiru.vel10]

HI All,

I have configured the IOS filter in Cisco 1721 router that router having 12.3 Ver IOS. I ma able to access all the internet site but I am not able to attaché the file while I am WEB client ( gmail ) IF any removed the IOS filter that I am able to Attach the file. Please help me if nay on had this problem

[John Blakley]

You may need to inspect java applets. It may depend on what version IOS you're using and if it supports the following command, but try:

access-list 1 permit any

ip inspect http java-list 1

HTH,

John

[thiru.vel10]

IOS Version : 12.3(14)T5,

Ans also i have impect java Appletes but no luck. I am having this kind of same router with same ios in another location. there its working fine.

[thiru.vel10]

Any help me out fromt his issue

[Peter Paluch]

Hello,

Your problems may be caused by out-of-order TCP segments. Until IOS 12.4(11)T, the IOS Firewall drops any out-of-order TCP segments. Since the indicated IOS version, there is a support that prevents such segments from being dropped. It is possible that depending on your network location, the segments are indeed being reordered, resulting in drops.

http://www.cisco.com/en/US/docs/ios/12_4t/12_4t11/ht_ooop.html

Also, in periods of low network load, you can try using the various "debug ip inspect" commands to see if the debugs give you any further indication of what is wrong with your connection.

Best regards,

Peter