Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

HTTP Chunking on an ASA5510

Hi,

We've recently installed a Pitney Bowes Postage meter which needs to connect to the PB servers to enable it to do whatever it needs to do.

In the documentation, it states that 'The System only supports “chunked” HTTP Transfer Encoding communication'

Does our ASA5510 support this? And if so, how do I check whether it's enabled at the moment?

Thanks

Michael

3 REPLIES
New Member

Hi Michaelhttp://www.fir3net

Hi Michael

http://www.fir3net.com/Protocols/http-what-does-transfer-encoding-chunked-mean.html

ASA should be able to support this?Are you doing HTTP inspection? If you do have an IPS on your firewall, you will need to review the relevant IPS signature

http://tools.cisco.com/security/center/viewIpsSignature.x?signatureId=5245&signatureSubId=0

Thanks

Pantelis

New Member

Hi Pantelis,Thanks for the

Hi Pantelis,

Thanks for the response.

How do I confirm whether or not I'm doing HTTP inspection? I have a 'Service Policy Rule' called 'inspection_default' which has only 'Default Inspection Traffic' selected. Under the 'Default Inspections' tab, 'http' is listed, but under 'Rule Actions', 'HTTP' is not selected. I've no idea whether this means that I am doing HTTP inspection or not.

Is there an easy way to test whether this type of communication is allowed - eg a test website? At the moment the Pitney Bowes device is not connecting, but I have no idea whether it is the 'chunking' or something else that is stopping it.

Thanks

Michael

New Member

Hi MichaelExample on how to

Hi Michael

Example on how to configure HTTP inspection: http://ccnpsecurity.blogspot.co.uk/2011/10/configuring-http-inspection-in-cisco.html

Regarding Testing I guess the best way is to use wireshark and test access to the device via HTTP (traffic should go via the asa)

http://zoompf.com/blog/2012/05/too-chunky

 

Thanks

Pantelis

217
Views
0
Helpful
3
Replies
CreatePlease login to create content