Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ASA5510 and HTTP class inspection

Hello all, I have an interesting issue with my ASA5510 running 7.1.2 code. There are several websites that seem to not come up while the http inspection is enabled (formally called http fixup in 6.x code). These are common sites that work for ASAs with 7.04 code version. For instance, when you attempt to send a message via yahoo's web interface, you are able to compose it, but once you hit send, you get a page not found. If you disable the http class inspection, everything is good. For as long as I can remember (pix 6.1 --> forward) the http fixup has been rock solid. Now, in the newest version of code (7.1.2), regular sites don't function all that well. Anyone else seeing this issue?

Also, I've never disabled the http fixup before, what security flood gates have I opened?


Re: ASA5510 and HTTP class inspection

You may be hitting the bug CSCsd74964. You can see the details of the bug on Cisco web site if you have CCO login.

The workaround is to disable "inspect http" or move back to older version.

CreatePlease login to create content