Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

cisco ios websense

we have installed the websense in our system but when we enable the websense the router cpu proc shoot up to 90%.

config

ip inspect name intfdc http urlfilter
ip urlfilter allow-mode on
ip urlfilter audit-trail
ip urlfilter urlf-server-log
ip urlfilter server vendor websense x.x.x.x

and applied to inferface

what cisco says is : Enabling HTTP inspection with or without any  options triggers the Java applet scanner, which is CPU intensive. The  only way to stop the Java applet scanner is to specify the java-list access-list keyword  and argument. Configuring URL filtering without enabling the java-list access-list keyword  and argument will severely impact performance.

so we change our config to

ip inspect name intfdc http java-list 51 urlfilter
ip urlfilter allow-mode on
ip urlfilter audit-trail
ip urlfilter urlf-server-log
ip urlfilter server vendor websense x.x.x.x

access-list 51 permit 51 any.

still there is no drop in cpu process? i need help regarding this?

2 REPLIES
Cisco Employee

Re: cisco ios websense

Try removing

ip urlfilter audit-trail

and see if that helps.

-KS

New Member

Re: cisco ios websense

Did this resolve the issue? I'm experiencing the same issues with a client that's trying to run Websense on a new 2900 series router with the Universal IOS installed on it.

Thanks,

Mike

684
Views
0
Helpful
2
Replies
CreatePlease login to create content