I can connect and browse the subfolders but when ever I try to download anything IE 7 just hangs. I am behind a ASA 5510. when I try to download the same file from my home PC it starts the download right away, which is why I think its my firewall. What do I need on the firewall to allow the download?
Few things we need to consider about SLOW downloads from your FTP server (which I ASSUME is out on the internet) for clients behind the firewall.
Was any s/w upgrade or h/w change done to the box when you noticed such a behavior ?
Since you are able to connect to the FTP site, most probably it will have nothing to do with your inspect FTP command on the box.
What you need to do is to setup captures on the box for interesting traffic and then analyse it using wireshark network analyser, to check for :
Increased MSS sizes being used for TCP transmission across the ASA. By default ASA has MSS of 1380 bytes, so if any greater segment sizes are coming to the ASA, then it will have to break them up into several PDU's which would mean a lot of reassembling will be done. This could slow down downloads.
Increased TCP MSS segments can be allowed on ASA, using advaced TCP options in MPF.
Check the asp drop counters on firewall to check for o-o-o packets (out of order) and try to increase the queue-limit for allowing such kinds of packets and montior if that helps.
Bottom line, best way to troubleshoot latency issues for downloads are packet captures. Here is a link to help you setup captures
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...