Hi, PIX eperts.
We have just installed v8 of ios on pix 515e. Enable trafffic monitoring for top 10 source and destination. Its working but something very odd.. If I use my browser through a ISA proxy like all our users here do, and I test say a 400mb download - I dont see the proxy server IP anywhere listed ?? - If I bypass the proxy in browser then my own internal NIC iP does show up as a top destination when I download the 400mb file? So why would the proxy server IP not show up - I asked a cisco guy and he said it should show up and has nothing to do with NAT (in any case if it was a NAT issue my IP would not show up also!) - The proxy server IP should just about be top 2 every hour but its not showing up at all!! - any ideas thanks - http as a service is always NO 1.
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Thanks Keith it was me mentioning poss of NAT. (just guessing here)
ISA has just one NIC
ISA 2006 sp1
firewall client = no
ISA installed in internal domain - inside firewall - only
Is pix isa default gateway? - NO - just like my NIC IP - the default gateway is a layer 3 switch (who's default gateway is then the PIX)
Thanks for help.
the switch (all internal IP's default gateway) - Is a layer 3 switch
so traffic not resolved from the route table goes to the pix which connects to outside world
layer 3 switch default route - 0.0.0.0 0.0.0.0 - 10.1.1.0 (ip on internal nic of PIX)
If you look at the sys log on pix you see the majority of connections being http from the proxy server NIC.
And so hence my question - Why is the proxy NIC not showing up EVER as a top 10 destination or source in the top 10 list from the pix???
THanks
Sure - I fully undersatnd the question - and the logic - it was the environment and setup I was trying to get a better handle on - andf the answer is i am not sure why it would do this.
The fact that the PIX is recognising - obviously as it has no choice - that the traffic is coming from the ISA then it should just as obviously be in the top list of sources of http traffic.
ISA does nothing 'funny' to the traffic except convert it from the proxy port to the true stream whilst sending on the requests. I think I will need to leave this to the Pix guys as I don't believe this will be an ISA issue - thats my area.
Business Accounts
Answer for Membership
by: keith_alabasterPosted on 2009-10-09 at 01:24:56ID: 25533126
Not sure why he would bring nat into the discussion at this point.
How is ISA installed - one or two nics?
Version of ISA and sp level?
Are you using the ISA firewall client?
Where is ISA installed? Internal domain? DMZ ?
Is the pix listed as the ISA server default gateway or does ISA have a chaining entry set?