asked on

cisco asa 5510 upgrade to 8.4.2

Hi Experts,
I have upgraded to version 8.4.2 my asa 5510
Now I have very slow internet.
What is the problem ?
I saw a inspect rule : INSPECT IP-OPTIONS
Is this causing the error ?
How to fix this error ?

MikeKane

Well, if you suspect anything in the class inspection, you can easily disable the suspects one by one and see if anything improves. I would say that if you don't use dns doctoring, then try disabling the 'inspect dns' first.

Take a look at the log to see if anything is being reported there as well.

Eprs_Admin

ASKER

Hi,
please can you explain in detail with commands ?
I am not a cisco pro

MikeKane

In your code, you should have a section for class-inspect. like this:

policy-map global_policy
class inspection_default
inspect tftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect sunrpc
inspect sqlnet

if you have inspect dns, then just issue the commands:
config t
policy-map global_policy
class inspection_default
no inspect dns

Eprs_Admin

ASKER

Hi,

we had some very strange things after the upgrade.
The internet was very very slow but available.
After the upgrade we had a lot of changes in the config and some new commands.
How is it possible, that after a simple upgrade the config changed and the internet is not working ?

ASKER CERTIFIED SOLUTION

MikeKane

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Eprs_Admin

ASKER

Thanks for the info