IP Inspect Issue

Unanswered Question
Sep 28th, 2009
User Badges:

HI All,


I have configured the IOS filter in Cisco 1721 router that router having 12.3 Ver IOS. I ma able to access all the internet site but I am not able to attaché the file while I am WEB client ( gmail ) IF any removed the IOS filter that I am able to Attach the file. Please help me if nay on had this problem


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
John Blakley Mon, 09/28/2009 - 06:05
User Badges:
  • Purple, 4500 points or more

You may need to inspect java applets. It may depend on what version IOS you're using and if it supports the following command, but try:


access-list 1 permit any


ip inspect http java-list 1


HTH,

John

thiru.vel10 Thu, 10/01/2009 - 03:05
User Badges:

IOS Version : 12.3(14)T5,

Ans also i have impect java Appletes but no luck. I am having this kind of same router with same ios in another location. there its working fine.



Peter Paluch Mon, 10/05/2009 - 07:43
User Badges:
  • Cisco Employee,

Hello,


Your problems may be caused by out-of-order TCP segments. Until IOS 12.4(11)T, the IOS Firewall drops any out-of-order TCP segments. Since the indicated IOS version, there is a support that prevents such segments from being dropped. It is possible that depending on your network location, the segments are indeed being reordered, resulting in drops.


http://www.cisco.com/en/US/docs/ios/12_4t/12_4t11/ht_ooop.html


Also, in periods of low network load, you can try using the various "debug ip inspect" commands to see if the debugs give you any further indication of what is wrong with your connection.


Best regards,

Peter


Actions

This Discussion