Http download slows down with IP Inspection enabled

[agipkcolon]

I have 2811 with Advanced Security IOS 12.4.23

Router is connected directly to internet. Users are translated with PAT to internet. When I enable ip inspection

(ip inspect name my-ios-fw tcp

ip inspect name my-ios-fw udp)

any file download from http slows down almost immediately till it reaches 20-30 bytes/s. If I remove inspection from users' interface I can download files in without any problem

can anybody help me?

[hadbou]

You may try configuring the "timeout seconds" parameter.

timeout seconds (Optional) - To override the global TCP or User Datagram Protocol (UDP), or Internet Control Message Protocol (ICMP) idle timeouts for the specified protocol, specify the number of seconds for a different idle timeout.

This timeout overrides the global TCP, UDP, or ICMP timeouts but will not override the global Domain Name System (DNS) timeout.