Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

route-map pb on Ios 12.4(11)T

Hello,

I tried to upgrade my 2821 ISR from 12.4(7) to 12.4(11)T.

It was expected to solve a http inspect performance pb.

This seems to be solved but it introduced a new bug:

I am using a transparent proxy for http filtering based on policy routing (PBR).

Requests are redirected (as my debug shows) but take about 50 sec to be answered.

When going directly to Internet without proxy PBR, response is immediate.

So I went back to 12.4(7)

Any similar experience ?

2 REPLIES
Community Member

Re: route-map pb on Ios 12.4(11)T

Configuring URL filtering without enabling the java-list access-list option will severely impact performance.

Community Member

Re: route-map pb on Ios 12.4(11)T

No, it is not the case, I have:

ip inspect nnnn http java-list 10

access-list 10 permit any any

I also route-map outbound http traffic to old pix fw because of bug in 12.4(7).

May be it is a bug due to new ZBP firewall feature.

146
Views
0
Helpful
2
Replies
CreatePlease to create content