Hi dear Community,   we have  massive problems with our surfspeed since 2 Weeks. i will try to descripe our Company Setup as good as Possible.   We have an cisco asa 5585-X as FW and use Cisco Cloud Web as our Contet Filter. All Users in Our Conmpany must use the internal Proxy Servers to have an Connection to the Internet.   User -> proxy( 2 Linux VMs Failover-Loadbalance) -> ASA. Our setup is an bit outdated because we dont use our core Switches for routing, so the ASA does that for us. Every single Interface  and Traffic is going trhough our ASA.   When our Businuesstimes starts the speed is ok but then after like 2 Hours its incredibly slow.  if i take out the proxy on my Windows Client the Connection is as fast as it should be, as soon the Proxy is enabled its slow as hell. So i check the Load ob both linux Proxy Servers and there are fine, i even did restart both of them and still no changes. I Checked the load on the ASA and it has got 65% Memory free and CPU is bored. After that i did clear all Xlates to see if there might be the Problem but still no change.   Now the Werid stuff starts. I did check the Syslog on the ASA and i did come across that the imlplicit rule deny any to any is on the top 10 of Hitting Rules. it seems like that  all our Clientes try to connect with the privat internal IP to the Outside interface. After a while of  checking the Forums i Came across a NAT Problem maybe? Bute there we no changes at all to the NAT Rules or Anything.    ( it seems like the clients try to connect with their private IP to the outside and after a couple of tries the use the proxy)          I hope i did descripe our Problem good enough to get some help because i got no more clues what it could be.   Thank you all for ur Help   Kind Regards    Gustav ... View more