2621XM - np ip inspect causes failure

NewsGroups | Search | Tools

User Password

Lost Password?

General Cisco Forum - Cisco Systems - Hardware Software and Security News and Discussions

Bookmark this page: YahooMyWeb

Yahoo!

Google

Windows Live

del.icio.us digg

digg

Netscape

Subject

Author

Date

2621XM - np ip inspect causes failure

Chris

12-13-2005

Re: 2621XM - np ip inspect causes failure

Merv

12-13-2005

Re: 2621XM - np ip inspect causes failure

Chris

12-13-2005

Re: 2621XM - np ip inspect causes failure

anybody43

12-14-2005

If you were Registered and logged in, you could reply and use other advanced thread options

Posted by Chris on December 13, 2005, 10:36 am

We are having a problem with browsing a particular web site - half of
the packets are dropped and it takes a long time to load the page. The
site is good, and we have no problems with any other sites. As a
troubleshooting step the tech from the ISP had me enter the command NO
IP INSPECT ETHERNET - to stop filtering on the ethernet level. When we
do this the internet goes down. We can still ping outside IP's - but
no browsing. I am not a Cisco pro, but I am being told this should not
happen. Any ideas or has anyone had this happen before? The config
has been looked at by a couple people and nothing stands out to them.
IOS ver 12.3(3a). Thanks!

Chris.

Posted by Merv on December 13, 2005, 11:45 am

There are quite a few CBAC bugs that have been fixed in higher 12.3
releases so you might want to try upgrading the IOS version being sued

Posted by Chris on December 13, 2005, 11:04 pm

Problem was fixed. Apparently if you have an access list, you have
to remove that before removing IP inspect. The problem in our config
was the ip inspect http. The word from Cisco is that many people use
that command incorrectly to inspect web traffic, when it really blocks
some java functions. Who knew?

Chris.

Posted by on December 14, 2005, 9:22 am

>From what you said, you have removed your firewall.

Is this what you want?

ip inspect name any-name http

When applied to an interface:-

turns on java blocking

Obviously!

Similar Threads	Posted
IP Inspect	May 18, 2006, 7:13 pm
HTTP INSPECT	November 11, 2005, 8:11 pm
IP Inspect vs. established	March 12, 2009, 9:59 pm
IP INSPECT question	January 21, 2010, 6:28 am
RCP through a Cisco with IP inspect enabled	March 22, 2005, 7:14 pm
CBAC / IP Inspect Confusion	December 6, 2005, 6:27 am
IP Inspect and Browsing issues	October 13, 2007, 2:08 pm
inspect pptp - disruptive?	February 14, 2008, 1:35 pm
ASA, static, icmp and inspect FTP	August 22, 2008, 5:11 am
NAT and access lists and IP INSPECT	January 22, 2010, 6:24 am

other useful resources:
The Federal Communications Commission (FCC)
Telecommunications Industry Association
Electronic and Software Security Products and Services
International Telecommunication Union

Custom CGI Perl and PHP programming by 1-Script.com