cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5221
Views
0
Helpful
11
Replies

Netflix streaming issues on Ironport

Tech Department
Level 1
Level 1

Hi All,

I'm having some issues getting Netflix to stream with Ironport properly.  It seems to stream intermittently, sometimes it works poorly and sometimes I get an error message in the browser.  The error seems to occur when Netflix is determining my video quality.  Even when it works the video quality is extremely poor, which further leads me to believe that there is a problem with the determining video quality step.

I ran a GREP and found this right about the time where the video quality is determined and right before the error message pops up.  The GREP is below.

Any ideas?  Thanks!

1285100677.171 265 172.16.160.8 TCP_MISS/200 896 GET http://safebrowsing-cache.google.com/safebrowsing/rd/ChFnb29nLXBoaXNoLXNoYXZhchAAGJXxBiCW8QYyBZW4AQAD "USM\jharrison@AD" DIRECT/safebrowsing-cache.google.com - ALLOW_WBRS-UnfilteredWebAccess-RestrictedWebAccess_Identity-NONE-DefaultRouting <-,6.7,-,-,-,-,-,-,-,-,-,-,-,-,-,-,-> - "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.3 (KHTML, like Gecko) Chrome/6.0.472.59 Safari/534.3"
1285100677.879 218 172.16.160.8 TCP_MISS/200 641 GET http://safebrowsing-cache.google.com/safebrowsing/rd/ChFnb29nLXBoaXNoLXNoYXZhchAAGJfxBiCg8QYqBpi4AQD_ATIFl7gBAAE "USM\jharrison@AD" DIRECT/safebrowsing-cache.google.com - ALLOW_WBRS-UnfilteredWebAccess-RestrictedWebAccess_Identity-NONE-DefaultRouting <-,6.7,-,-,-,-,-,-,-,-,-,-,-,-,-,-,-> - "Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/534.3 (KHTML, like Gecko) Chrome/6.0.472.59 Safari/534.3"
1285100679.610 3931 172.16.160.8 TCP_MISS/200 616832 GET http://www.netflix.com/pages/watchNow/player/silverlight/SLPlayer4.xap?v=463592 "USM\jharrison@AD" DIRECT/www.netflix.com - ALLOW_WBRS-UnfilteredWebAccess-RestrictedWebAccess_Identity-NONE-DefaultRouting <Shop,7.3,-,-,-,-,-,-,-,-,-,-,-,-,-,Shop,-> - "Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; InfoPath.2; MS-RTC EA 2)"
1285100681.001 353 172.16.160.8 TCP_MISS/200 3020 TCP_CONNECT 204.236.234.123:443 - DIRECT/204.236.234.123 - PASSTHRU_WEBCAT-DefaultGroup-UA_Exempt_Identity-NONE-DefaultRouting <Ente,0.0,-,-,-,-,-,-,-,-,-,-,-,-,-,Ente,-> - -
1285100681.273 264 172.16.160.8 TCP_MISS/200 2700 TCP_CONNECT 204.236.234.123:443 - DIRECT/204.236.234.123 - PASSTHRU_WEBCAT-DefaultGroup-UA_Exempt_Identity-NONE-DefaultRouting <Ente,0.0,-,-,-,-,-,-,-,-,-,-,-,-,-,Ente,-> - -
1285100681.913 306 172.16.160.8 TCP_MISS/200 6316 TCP_CONNECT 204.236.234.123:443 - DIRECT/204.236.234.123 - PASSTHRU_WEBCAT-DefaultGroup-UA_Exempt_Identity-NONE-DefaultRouting <Ente,0.0,-,-,-,-,-,-,-,-,-,-,-,-,-,Ente,-> - -
1285100682.342 308 172.16.160.8 TCP_MISS/200 2924 TCP_CONNECT 204.236.234.123:443 - DIRECT/204.236.234.123 - PASSTHRU_WEBCAT-DefaultGroup-UA_Exempt_Identity-NONE-DefaultRouting <Ente,0.0,-,-,-,-,-,-,-,-,-,-,-,-,-,Ente,-> - -
1285100682.759 374 172.16.160.8 TCP_MISS/200 14481 TCP_CONNECT 204.236.234.123:443 - DIRECT/204.236.234.123 - PASSTHRU_WEBCAT-DefaultGroup-UA_Exempt_Identity-NONE-DefaultRouting <Ente,0.0,-,-,-,-,-,-,-,-,-,-,-,-,-,Ente,-> - -
1285100705.203 56863 172.16.160.8 TCP_MISS/200 7367 TCP_CONNECT 65.54.52.75:443 - DIRECT/65.54.52.75 - PASSTHRU_WEBCAT-DefaultGroup-UA_Exempt_Identity-NONE-DefaultRouting <Web-,6.1,-,-,-,-,-,-,-,-,-,-,-,-,-,Web-,-> - -

11 Replies 11

edadios
Cisco Employee
Cisco Employee

The logs you provided suggest no blocking from the ironport.

TCP Miss means the request is not in cache

Can you maybe try to disable the caching, and see if that makes it work better?

In the GUI > Security Services > Proxy settings > edit settings > remove the check in the box for cache , submit and commit.

Regards

cshannahan
Level 1
Level 1

I'm getting the same thing with my Ironport and Netflix, it seems to be mainly on the Ipad app though.

Did you ever figure this out?

joewilker
Level 1
Level 1

I'm having similar issues.  It did start around the same time as we installed the ironport, although all tests through the ironport suggest that its not the ironport that is blocking it.   Our issues seem to be through our wireless with the Wii, and the Reko.  Our wireless goes through a Cisco Wireless Lan Controller.  Could it be the ironport is slowing down the connection for the netflix streaming connection tests and Netflix is assuming a bad connection? 

I was able to resolve my netflix issues by turning off what I think is called free range requests via the command line.  It was a known issue.

Also, I was told that they have fixed this so it will work with that on with the latest version.  Good luck.

Updated to the latest version, but still no luck.  Do you have any instructions on turning off the "free range requests"?  I did a google search and came up with nothing.

SSH to the box and disable "rangerequestdownload".

Just do a ? when you log in and you will see it at the bottom.  Disable it then try.

I had issues and Ironport told me to turn that off which worked.

Checked and it was already disabled.  I've opened up a case with IronPort support last week.  Hopefully, they will get to it sometime this century.  Thanks for your help though.

Netflix streaming, and iTunes downloads seems to be a known issue with Ironport.  We ended up just creating a custom URL and dumpped all the IP ranges for Netflix and iTunes, which fixed the problem for us.  Ironport support said that was the best option.

Hi Joseph,

could you please share the IP ranges for Netflix ? i am facing the same problem.

Netflix IP Range: 108.175.32.0/24, 108.175.33.0/24, 108.175.34.0/24, 108.175.35.0/24, 108.175.36.0/24, 108.175.37.0/24, 108.175.38.0/24, 108.175.39.0/24, 108.175.40.0/24, 108.175.41.0/24, 108.175.42.0/24, 108.175.43.0/24, 108.175.44.0/24, 108.175.45.0/24, 108.175.46.0/24, 108.175.47.0/24

Thank you !! it works!!

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: