Solved

Cisco Pix - dropping web connection

Posted on 2004-09-10
11
182 Views
Last Modified: 2013-11-16
I setup a Cisco PIX 501 to pass web traffic to an internal machine. Standard access-list for www, ftp, and ftp-data.

I have about 12 websites that I have pointed to the public IP address. I loose my connection to that IP all the time through the web. It will drop for a minute and come back up for another couple minutes and then drop again.

What I have done thus far:

Ran a continuous ping against the firewall. No drops.
Tested the webserver internally any time I noticed an outage and it came up everytime.

I am lost on this one. Are there commands that I can run to test the PIX to see if it is dropping the connection? Could I be getting DOS'd?

Help.



0
Comment
Question by:greenskwerl
  • 6
  • 3
11 Comments
 
LVL 79

Expert Comment

by:lrmoore
ID: 12028976
>I loose my connection to that IP all the time through the web.
i'm not sure I follow you on that. How do you lose connection? During a FTP session? During a WWW session?
Http is stateless once all the content downloads to your browser anway...

You can use the monitoring portion of the GUI to look at the IDS graphs (assuming you have it -IDS- enabled on the interface)
0
 
LVL 79

Expert Comment

by:lrmoore
ID: 12028985
>I have about 12 websites that I have pointed to the public IP address.

The 501 is simply not designed for this much traffic, especially if you are using only one public IP address for all 12 sites. How much traffic to these sites get?

0
 

Author Comment

by:greenskwerl
ID: 12029022
it is minimal at this point. How can I check?
0
 
LVL 79

Expert Comment

by:lrmoore
ID: 12030077
If you use the Web GUI, just monitor the number of inbound connections
Monitoring, Connection graphs, perfmon, connections perfmon, web perfmon, Graph it!
0
 

Author Comment

by:greenskwerl
ID: 12030349
OK,

O monitored it for about 10 minutes. During this time, I lost connection twice. During the entire time, my peak bandwidth on the outside interface didnt go past 256KB. The CPU averaged 1% usage, and memory stayed at 11MB the entire time.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 
LVL 79

Expert Comment

by:lrmoore
ID: 12078688
What's your status now? Any difference?

When you say that you lost connection, how are you capturing that? What kind of connection is it that you lose?
0
 

Author Comment

by:greenskwerl
ID: 12078800
Yes,

I narrowed it down to the webserver. It was working internally, but it was having issues serving stuff externally. Rebuilt it and it was fine.
0
 
LVL 79

Expert Comment

by:lrmoore
ID: 12078818
Glad you found the answer! Sorry I wasn't much help for you....
0
 
LVL 79

Expert Comment

by:lrmoore
ID: 13703144
How's it going? Can you close this question?

http://www.experts-exchange.com/help.jsp#hs5

Thanks for attending to this long-forgotten question.

<-8}
0
 

Accepted Solution

by:
PAQ_Man earned 0 total points
ID: 14057581
Question Closed, 500 points refunded.
PAQ_Man
Community Support Moderator
0

Featured Post

Zoho SalesIQ

Hassle-free live chat software re-imagined for business growth. 2 users, always free.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This is about downgrading PIX Version 8.0(4) & ASDM 6.1(5) to PIX 7.2(4) and ASDM 5.2(4) but with only 64MB RAM and 16MB flash. Background: You have a Cisco Pix 515E which was running on PIX 7.2(4) and its supporting ASDM 5.2(4) without any i…
Do you have a windows based Checkpoint SmartCenter for centralized Checkpoint management?  Have you ever backed up the firewall policy residing on the SmartCenter?  If you have then you know the hassles of connecting to the server, doing an upgrade_…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now