Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 

Slow perfomance is found on a cisco router and security device manager when http inspection feature is turned on

Resolution

The inspect http command protects against specific attacks and other threats that can be associated with HTTP traffic. HTTP inspection performs several functions:

  • Enhances HTTP inspection

  • URL screening through N2H2 or WebSense

  • Java and ActiveX filtering

The enhanced HTTP inspection feature, which is also known as an application firewall, verifies that HTTP messages conform to RFC 2616, use RFC-defined methods, and comply with various other criteria. This can help prevent attackers from using HTTP messages to circumvent a network security policy.

However, turning on the HTTP inspection feature sometimes makes the internet traffic slow when the WebSense server is integrated with the PIX Firewall. In many cases, turning off the HTTP inspection feature fixes the issue.

For more information, refer to the Managing HTTP Inspection section of Applying Application Layer Protocol Inspection.

3016
Views
0
Helpful
0
Comments