Cisco WAN :: HTTPS Traffic Slow Over 877 Router
Feb 12, 2013
I have reconfigured the router from scratch using all sorts of methods and can not work out whats wrong, basically when the client is going to their bank the login screen takes upto a minute to load, and the same with hotmail. However using a cheap billion router these login screens are instant
Checking the CPU usage shows the CPU is hovering around 5-20% at the worst of timesThere is about 10 machines behind this router and they do not do that much intensive work over the link besides Outlook Anywhere (HTTPS)I have put a ACL on the LAN connection to only allow 1 machine in and still no luckI have also updated the IOS to c870-advipservicesk9-mz.124-24.T4.binAll other traffic runs fine over the link and there are no complaints on standard HTTP traffic
View 3 Replies
ADVERTISEMENT
Oct 22, 2011
Just upgraded my E4200 to firmware 1.0.03 (from 1.0.01). I have some new issues, questions, and some outstanding issues.
1) Web interface over https is now painfully slow.
2) Does DDNS work in bridge mode? DynDNS allows the sending of an update without an IP address, so it should be able to work.
3) Does accessing the management interface in bridge mode count as local or remote?
4) I'd really like to be able to get WOL working through the router. I managed to create a static DHCP reservation for 192.168.1.254 to ff:ff:ff:ff:ff:ff, but I don't think the router added that entry to the ARP table, is there any way to do this.
(I think have WOL forwarded to 192.168.1.254). 5) Should the router be providing some local dns hostnames? For example I have the device name set up in the local network setup, but it won't resolve. Similar for connected devices, especially those with with a DHCP reservation. 6) In bridge mode, does it matter which port is used to connect to the other network device? Does it have to be the WAN port?
View 6 Replies
View Related
May 25, 2011
I am having a setup with a 2851 router & websense url filtering server where I need to forward the traffic to websense server for all the internet requests. The http traffic is getting filtered properly, but the https traffic is not getting filtered. The two commands I ahev given for http & http are as follows: ip inspect name test http urlfilter ip inspect name test https.
View 9 Replies
View Related
Mar 24, 2013
I've installed a rv042G, disabled dhcp, opened port 3389 (wan to lan), one port formwarding rule to terminal server.
Now 48 hours later, when i try to login to the router, (https), I'm automatticaly redirect to the https site of the NAS (iomega ix-200).
The nas is connected to a cisco sg100-24, which is connected to lan 1 on the router.
View 4 Replies
View Related
Apr 20, 2011
Never seen a Cisco, or any other L3 switch before. Nor an Lx router. Any step by step,or class room or web based training, or a partner or Cisco helper to get us up to speed on this.Goal is to limit http and https traffic in favor of telnet to an AIX server and RDP to a Windows TS. Printing would be ahead of http/s and below the others.
Interstingly, the web site promises 9 videos, but there are only 8. The demo guide says about OoS: "Coming Soon".Where to go? Who(m) to call?
View 6 Replies
View Related
Dec 15, 2011
I am having an ASA5510 with a CSC-SSM-10 module. I am able to block http traffic through the ASA but cannot block https traffic through it. Need to block https traffic using the CSC module.
View 19 Replies
View Related
Feb 23, 2011
I want to block some social networking sites using ASA 5510-CSC-SSM, As I searched and come to know that ASA 5510 can't inspect and intercept for https traffic because it is encrypted while traversing throught the ASA. I want the ASA to make functioning for https too, not only http. Can i perform this task by updating any software on existing device?
View 2 Replies
View Related
Feb 9, 2012
Having issues with HTTPS sites being very slow after applying KB2585542? Once you remove this Microsoft patch everything returns to normal. It appears that the CSS does not handle the split-ssl requests properly. I have opened a TAC case but am not really getting anywhere as we seem to be the only company that is having this issue.
View 2 Replies
View Related
Jun 3, 2013
I am unable to redirect the HTTPS traffic on my cisco router with WCCP V2
View 2 Replies
View Related
Jun 12, 2013
If you are using load balancing how do you bind i.e. all HTTPS traffic to i.e. wan1. RV042G V2 you can inter 0.0.0.0~0.0.0.0 as Source IP to forward from all IPs, how do you do that with a V3?
View 2 Replies
View Related
Dec 20, 2010
Right now, in my network there is no proxy server and all users go straight through the ASA to access internet. I would like to put a squid with dansguardian (for web filtering). Steps in getting all http and https traffic from ASA go via my squid?
View 18 Replies
View Related
Jul 1, 2011
We have ASA 5520 with CSC-SSM 20 and we want to block https traffic but when we are blocking https traffic http traffic going to block but user are able to open website.
View 1 Replies
View Related
Apr 23, 2012
I have an ASA 5505 with the base license,When I setup the DMZ interface I had to add the deny access to the inside VLAN. The DMZ works fine with WiFi on it, but user's iPhones can't get email unless they turn WiFi off.Is there a simple way to allow HTTPS traffic through the DMZ interface to our internal Exchange server which is NAT'd on the 5505's external IP?
View 3 Replies
View Related
Jul 14, 2011
I have got a Cisco router connected to a LAN and to the internet.I was wondering if I could nat https traffic from inside to internet to a local server (Proxy) on a given port for example tcp 8080.
int tunnel0
ip address 192.168.0.1 255.255.255.0
ip nat inside
int fa0/1
des internet connexion
ip address 41.x.x.x.x 255.255.255.248
ip nat outside
ip access-list extended Proxy_Redirect
permit tcp 192.168.0.0 0.0.0.255 any eq 443
View 1 Replies
View Related
Aug 5, 2008
I have an ASA 5505 that I am using to connect my contractors to via an inside interface, the outside interface is my private LAN. I have setup on our corporate Proxy server to allow traffic from my outside interface of my ASA to go to the internet without credentials BUT log internet activity. The question is I want to know if the ASA can send that http & https traffic to my proxy server and all other traffic to my default route? I want to be able to send all internet traffic to my proxy server. This will avoid me asking the contractors to place proxy credentials in their browsers.
View 6 Replies
View Related
Jun 8, 2011
I got a stange vpn problem, just added a new vpn tunnel to our ASA5510 and then the users report that the traffic through the tunnel is very slow, when I try it myself I get a speed like 50kb/sec to the internal server.If I use our regular tunnel or any other tunnel the speed is just fine. I´ve added the new tunnel in the same way as the other tunnels, that is thorugh ASDM vpn wizzard.
View 2 Replies
View Related
Feb 4, 2012
how a device (PC or router, in this example) knows to slow down broadcast of traffic.Say my cable modem from my ISP is coded to only allow 50mbps.My internal network supports the normal 100mbps.How does my router know to not send my cable modem more than 50mbps of data (because anything above, I assume after the cable modems RAM fills, will be dropped).I know TCP/IP has "Autonegotiation" which determines link type, but it's only based around if t's 1000/100/10 ethernet. No custom speed variable, such as 50mbps in this case.Say I put my network uploading data maximum stress to my internet connection, at 100mbps. Will my cable modem ever send some special packet telling me router that's too much or something?I suppose if I knew this, I could also understand how when I upload a file to another computer on my network, it does it at the full 100mbps, but over the internet, limited to my upload speed; but how does my computer or router know to slow down because my ISP doesn't allow 100mbps up? It has to be able to detect link speed somehow, otherwise just constantly sending 100mbps up will result in tons of lost data at my router/cable modem, and give the computer a frequently false sense of upload speed.
View 1 Replies
View Related
May 2, 2013
We have many VPN tunnels back to our corporate office. All of these tunnels are very slow (same with our client VPN's). Our main firewall device at the corporate office is an ASA5510. We have a 100 Mb/sec Metro Ethernet internet connection here. We do not allow split-tunneling.
Our remote sites vary. We have DSL connections, cable internet connections, and other types of broadband that vary in speeds from 5 to 100 Mb/sec (up and down). The remote sites mostly have PIX 501's, but we have an ASA 5505 in one of the locations.
To take an example. On one of our remote sites that has a 100 Mb/sec connection, if I ping device to device, I'm getting ping times of about 50ms. And I'm pinging back through another 100 Mb/sec connection. If I get on a computer down there and run a speed test, I'm showing down speeds of about 1.5 Mb/sec... nowhere near 100. Some of that could be due to the lack of split tunneling, but I also suspect this could be an MTU issue.
Right now, all my MTU's are just set to the default 1500. Perhaps this is too high. I used this site to check my max: [URL]
I did a few tests from behind several of my firewalls. I pinged from a machine on one side of the tunnel to the firewall on the other end. I'm assuming the max MTU I come up with is the max MTU for the firewall I'm behind while pinging, right? The max amounts I came up with for some of my devices were as follows: Corporate ASA 5510 > 1272 (if you add the 28 byte packet header that would make it 1300) Remote PIX 501 > 1416 (if you add the 28 byte packet header that would make it 1444) Remote ASA 5505 > 1418 (if you add the 28 byte packet header that would make it 1446)
So, do I just need to set my MTU values to the appropriate amounts? I have tried changing the value, but I don't see any change in speed/performance. But I also don't know if I need to reboot the firewalls after changing the MTU. I know with Catalyst switches, you have to reload. But I didn't see any messages about needing to reboot on the ASA's/PIX's.
View 10 Replies
View Related
Jul 15, 2012
I have 2 new 3750g devices in a small environment. switch1 acts as our collapsed core and has ip routing enabled, and is connected to a ASA 5510. There are 3 HP l2 switches connected to switch1 as well. switch2 is simply a server switch. switch1 and switch2 have a 2port etherchannel between them, and a vlan trunk carrying 4 vlan's. traffic between any 2 hosts on switch2 (same vlan) are slow. (average 300Mbits/sec) If I move one of those hosts to switch1, speeds increase by 3 times. (average 900 Mbits/sec). Additionally, traffic between any 2 hosts on switch1 are quick. testing is done with iperf as well as timing 1gig file transfers.
I don't see any errors or drops anywhere, and there are no other symptoms other than slow transfer beteween hosts on switch2. I just got 2 more of these 3750's to put in a 2nd site that we have, put a quick configuration on them, and have the same result. Other than switch1 having ip routing enabled, the configs are pretty much identical.
View 2 Replies
View Related
Feb 15, 2012
I am using virginmedia superhub which is supposed to give me a max of 30mbps. I use it wireless but am often getting fluctuations in speed - sometimes 500kbps upto 20mbps, nothing consistently close over 20mbps or close to 30mbps. I have bought a powerline kit - "develo olan 200 AV Wireless N" which has improved the speed but I still get fluctuations.
View 1 Replies
View Related
Jun 8, 2011
I have installed CSC-SSM-10 on cisco ASA 5520.I am facing two problems
1 : When I send traffic from ASA to SSM module then internet connection becomes slow and sometimes internet session disconnected.
2. When I try to manual update then following erros shows please see attachment .
View 6 Replies
View Related
Feb 21, 2013
I can put login into the router just fine.. But the same login doesn't seem to work via web browser
View 2 Replies
View Related
May 5, 2011
I will be adding wireless access points or repeaters on a business network. The business already has one wireless router using a https login, that 15 computers are wired to, through switches. This Secure http router is directly connected to the cable modem.Would I be loosing the benefit of Secure http by adding wireless access points or repeaters that don't support it? Or would they be securely routed by the main https router connected to the gateway?I have never had the opportunity to work with a secure http router before.
View 4 Replies
View Related
Feb 20, 2012
is there any router for small office company that can NAT multiple https and support multiple public ip address?I want to host our multiple website via https.
View 1 Replies
View Related
Nov 15, 2012
I need to get to my web admin page, but I cannot get into my router to do so.
IE tells mt that there is a certifacte error, and then gives me the option of going in anyway.
When I select that option, nothing happens, and the same IE warning page remains.
I am plugged directly into an e-net port on the router, and it is a WRT160N.
View 6 Replies
View Related
Mar 2, 2013
I have an issue with new Win8 & IE10. When I try to access web management interface of my wrt160nl (Firmware Version: 1.00.01 B15) via HTTPS I'm receiving the foolowing message:"Continue to this website (not recommended)." If I click on it another error page appears:"Certification error: Navigation blocked. There is a problem with this website's security certificate"
At the same time I'm able to acccess the management interface via HTTPS, but from my laptop with Win7 & IE9. There if I click on the red Certificate Error > View certificate and the certificate information is:Issued by: Linksys Issued to: Linksys Valid from : 1.1.2009 to 1.1.2010
So I'd like to know if I could update the router certificate or what settings should I use in IE10 in order to access the web management interface via HTTPS?
View 9 Replies
View Related
Feb 2, 2012
2 linksys routers a E1000 (fw v2.1.02) and a E4200 (fw v1.0.03) aren't accessable via HTTPS. Both via LAN https://router-ip and via wan https://isp-router-ip:8080 . Both routers are configured correctly (allready did a rerstore to fact. defaults. while having a chat with linksys live chat support). Everything without a result.
Ie9 doesn't accept the linksys/cisco certificate. after the first warning ie9 just sais that it's unable to show the page .
I did some testing and found that it doesn't work with a win7 +IE9 (up to date updates) and also not on a win XP +IE8 (up to date updates), win XP +chrome (up to date updates).
And it works on a old image (virtual Pc) of WIN XP- IE6 (no up to date updates) and win XP(up to date updates) +firefox (older version) .
i tried to export the certificate using the xp-ie6 virtual pc. and import it else where, but that works within the lan. Over the WAN it's a " NO GO" . Is this a " Microsoft" or a " linksys/cisco" issue?
View 9 Replies
View Related
Feb 5, 2013
I tried to block youtube and facebook https in my router WRT610 V1 but the router fails blocking these websites. But, it does work for blocking youtube and facebook http.
View 9 Replies
View Related
Dec 7, 2011
i have 2 rv042 with a vpn tunnel between them.the problem is that i can't access https over the VPN !if i telnet 192.168.10.1 443 through the VPN, it's not working either. if i telnet 192.168.10.1 443 in my 192.168.10.0 network it's working so it's reall the VPN tunnel the problem.
View 1 Replies
View Related
Feb 29, 2012
I can not access my Linksys E3000 router via https://192.168.1.1.Before this mishap, I was able to gain access to my Linksys E3000 router via http://192.168.1.1 and/or the Cisco Connect software application on Windows 7. Yesterday, I went into my router's administration page and disabled http, and enabled https. I then closed out all browsers, restarted them and entered https://192.168.1.1
After that, I learned quickly I made a huge mistake to make these changes. I simply can not access my router admin wired or wirelessly. Accessing the internet works great, but router admin page is a no go.Firefox and IE states, "There is a problem with this website's security certificate." and was unable to proceed.Firefox even gave me the option to accept a security exemption to proceed, but that failed.
I have also tried using the Cisco Connect utility, and that also failed. I have taken these steps and not been able to access my router's admin page.I don't want to take the last final resort to reset my router and re-enter my settings again. I know I saved the router's backup file somewhere, but can't find it.Is there another way for me to gain access via https with http disabled? All I want to do now is go back in and change it back to enable http access.
View 9 Replies
View Related
Jan 28, 2012
To improve the security of my 4200 v1 router, I turned on in the router configuration "Access via HTTPS" and after the reboot I could not access my router via the browser even when I click on the browser message to continue. What do I need to configure either in the router or my browser to use HTTPS?
View 9 Replies
View Related
Oct 6, 2011
here comes the incident description: WRVS4400N breaks established VPN session if I am trying to connect to any LAN host via HTTPS.
View 1 Replies
View Related
Oct 12, 2012
This problem just started. I am unable to load certain https sites (for work). If i directly connect to ethernet, it works, so my isp isnt my problem. When i try to connect to the sites, it says "sending request" then times out. I have played around with the settings non stop and nothing has worked. I have a mac running 10.7.5.
View 3 Replies
View Related
