cisco ios websense

Unanswered Question
Jun 8th, 2010
User Badges:

we have installed the websense in our system but when we enable the websense the router cpu proc shoot up to 90%.


config

ip inspect name intfdc http urlfilter
ip urlfilter allow-mode on
ip urlfilter audit-trail
ip urlfilter urlf-server-log
ip urlfilter server vendor websense x.x.x.x


and applied to inferface


what cisco says is : Enabling HTTP inspection with or without any  options triggers the Java applet scanner, which is CPU intensive. The  only way to stop the Java applet scanner is to specify the java-list access-list keyword  and argument. Configuring URL filtering without enabling the java-list access-list keyword  and argument will severely impact performance.



so we change our config to

ip inspect name intfdc http java-list 51 urlfilter
ip urlfilter allow-mode on
ip urlfilter audit-trail
ip urlfilter urlf-server-log
ip urlfilter server vendor websense x.x.x.x


access-list 51 permit 51 any.


still there is no drop in cpu process? i need help regarding this?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Kureli Sankar Tue, 06/08/2010 - 07:38
User Badges:
  • Cisco Employee,

Try removing


ip urlfilter audit-trail


and see if that helps.


-KS

Mr.Callahan Tue, 05/31/2011 - 12:19
User Badges:

Did this resolve the issue? I'm experiencing the same issues with a client that's trying to run Websense on a new 2900 series router with the Universal IOS installed on it.


Thanks,

Mike

Actions

This Discussion