Web traffic never seems to leave the controller - all other traffic OK

[baskervi]

We have a 5508 controller with various access points connected to it. There is a trunk from a Catalyst 4507 to the controller, and a trunk from the ASA to the Catalyst. One of the VLANs from the 5508 is L3 terminated to the ASA. All hosts connected to the access points can pass all traffic to the Internet except for port 80. HTTPS works fine as well as a half a dozen ports we tested.

I set up a packet capture on the ASA, and I see all traffic but port 80. I'm speculating that the controller is filtering this traffic. Has anyone else run into this? I've been through the various menus on the controller, and I can't see where this would be filtered. There isn't a proxy configured on the laptops or phones.

Thanks

[Milton Tizoc · Accepted solution]

Hi baskervi, in the controller you can configure some ACLs and you can apply them to an interface, in the menu security -> Access Control List is where you can add them, and in the menu controller -> interfaces you can edit some one and apply the acl, if you don´t configure that maybe it could be in the ASA.

Hope this helps you.

Regards,

Milton Tizoc.

[baskervi]

The problem ended up being a Barracuda spyware firewall. The Barracuda was forwarding the tagged vlan packets, and it was only filtering the web traffic. I set up an SVI on the core switch, and everything started to work fine. Put it back on the ASA, and the packets never showed up. Thanks for the comment, as it gave me the idea to try this.