route-map pb on Ios 12.4(11)T

Unanswered Question
Jan 17th, 2007
User Badges:

Hello,

I tried to upgrade my 2821 ISR from 12.4(7) to 12.4(11)T.

It was expected to solve a http inspect performance pb.

This seems to be solved but it introduced a new bug:

I am using a transparent proxy for http filtering based on policy routing (PBR).

Requests are redirected (as my debug shows) but take about 50 sec to be answered.

When going directly to Internet without proxy PBR, response is immediate.

So I went back to 12.4(7)


Any similar experience ?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
j-block Tue, 01/23/2007 - 07:19
User Badges:

Configuring URL filtering without enabling the java-list access-list option will severely impact performance.


falain Wed, 01/24/2007 - 09:55
User Badges:

No, it is not the case, I have:

ip inspect nnnn http java-list 10

access-list 10 permit any any


I also route-map outbound http traffic to old pix fw because of bug in 12.4(7).


May be it is a bug due to new ZBP firewall feature.


Actions

This Discussion