cisco ios websense

joshiaroon · ‎06-08-2010

we have installed the websense in our system but when we enable the websense the router cpu proc shoot up to 90%.

config

ip inspect name intfdc http urlfilter
ip urlfilter allow-mode on
ip urlfilter audit-trail
ip urlfilter urlf-server-log
ip urlfilter server vendor websense x.x.x.x

and applied to inferface

what cisco says is : Enabling HTTP inspection with or without any options triggers the Java applet scanner, which is CPU intensive. The only way to stop the Java applet scanner is to specify the java-list access-list keyword and argument. Configuring URL filtering without enabling the java-list access-list keyword and argument will severely impact performance.

so we change our config to

ip inspect name intfdc http java-list 51 urlfilter
ip urlfilter allow-mode on
ip urlfilter audit-trail
ip urlfilter urlf-server-log
ip urlfilter server vendor websense x.x.x.x

access-list 51 permit 51 any.

still there is no drop in cpu process? i need help regarding this?

Kureli Sankar · ‎06-08-2010

Try removing

ip urlfilter audit-trail

and see if that helps.

-KS

Mr.Callahan · ‎05-31-2011

Did this resolve the issue? I'm experiencing the same issues with a client that's trying to run Websense on a new 2900 series router with the Universal IOS installed on it.

Thanks,

Mike