Pix 515 problems downloading files

Answered Question
Sep 3rd, 2008
User Badges:

Hi all,

I have a problem I am configuring a Cisco pix 515e, I have two VPN tunnel site to site Working and the firewall up and running, but I have a problem with the firewall when I tried to download files from certain sites I can't, for example I can't download files from Mozilla http://www.mozilla.org/download.htm or www.microsoft.com among many others.

I can download files from torrents, and most ftp servers, as well update my computers from Microsoft widows update.

For example if I download internet explorer 8 from Microsoft site, the download starts but only download a few Kb, other times the download doesn't start.

I also have problems with you tube, the problem is the following, if I tried to see any video the clip is very slow to start, and in some cases I can't see the clips.

I attach the log file from Cisco pix to help troubleshoot the problem, as well a configuration file.





Correct Answer by singhsaju about 8 years 10 months ago


I am glad i could help you in resolving the issue .


Pls rate if it helps


HTH

Saju

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
jjohnston1127 Wed, 09/03/2008 - 09:17
User Badges:
  • Silver, 250 points or more

I can't answer your question specifically, but if you look at your configuration you have internal network routes to 20.0.0.0/8, 30.0.0.0/8, and 40.0.0.0/8 which are public sector IP address ranges. If any outbound traffic is destined to a website that falls within that range, you will get weird results possibly like these.



route inside 20.0.0.0 255.0.0.0 10.0.0.54 1

route inside 30.0.0.0 255.0.0.0 10.0.0.54 1

route inside 40.0.0.0 255.0.0.0 10.0.0.54 1


singhsaju Thu, 09/04/2008 - 06:08
User Badges:
  • Silver, 250 points or more

This could be a fragmentation issue.Try to adjust TCP MSS value on PIX.


sysopt connection tcp-mss MSS_size_in_bytes

example : sysopt connection tcp-mss 1360


HTH

Saju

Correct Answer
singhsaju Thu, 09/04/2008 - 12:57
User Badges:
  • Silver, 250 points or more


I am glad i could help you in resolving the issue .


Pls rate if it helps


HTH

Saju

Actions

This Discussion