| |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW-1] Slow web sites access
- To: [email protected]
- Subject: Re: [FW-1] Slow web sites access
- From: "Gill, Craig" <[email protected]>
- Date: Mon, 14 Jul 2003 08:32:03 -0500
- Importance: normal
- Priority: normal
- Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
- Sender: Mailing list for discussion of Firewall-1 <[email protected]>
- Thread-index: AcNILC31dB9hLwfOSTuEy8ZeeZXD8QB3rDRg
- Thread-topic: [FW-1] Slow web sites access
It also sounds like you are using the http security server as well.
You'll want to modify this file /$FWDIR/conf/asm.C
You will see a section in that file "HTTP_security_server" and you can modify some parameters, try changing the current values to these values:
* Make a backup of the asm.C file before making changes! *
:http_check_request_validity (false)
:http_check_response_validity (false)
:http_max_header_length (4096)
:http_max_header_num (500)
:http_max_request_url_length (4096)
:http_valid_on_all (false)
Once you have the values changed, save the file, and push policy to the firewall and test the website.
If this doesn't work for you than there is another workaround I have.
Craig
-----Original Message-----
From: Bourque Daniel [mailto:[email protected]]
Sent: Friday, July 11, 2003 10:56 PM
To: [email protected]
Subject: [FW-1] Slow web sites access
OK, we just upgrade to NG over a VRRP Nokia Cluster and we are experimenting
slow access to somes web sites. Current level is IPSO 3.7 NG FP3 with HF1
and HF2.
http://www.PGATour.com and http://msn.espn.go.com are very very slow to load
(we are talking 5 minutes for espn) while other sites are fast. There is no
drop that I can relate to thoses access in the log.
Anybody has any ideas why thoses sites can take 5 to 10 minutes to load?
Daniel Bourque
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
* EMAIL DISCLAIMER AND TERMS OF USE *
The information transmitted is intended only for the person to whom it is addressed and may contain confidential and/or privileged material. If you have received an email in error please notify [email protected] and then delete all copies of it from your systems.
Any use of, or any action relying upon, information in an email by persons other than the intended recipient is prohibited.
Although Hilite International scans incoming and outgoing emails and email attachments for viruses we cannot guarantee a communication to be free of all viruses nor accept any responsibility for viruses.
Although Hilite International monitors incoming and outgoing emails for inappropriate content, Hilite International cannot be held responsible for the views or expressions of the author.
The views expressed may not necessarily be those of Hilite International and Hilite International cannot be held responsible for any loss or injury resulting from the contents of a message.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
|
|
