Guest

Preview Tool

Cisco Bug: CSCvi77643 - Hanging downloads and slow downloads on a FPR4120 due to http inspect

Last Modified

Jun 13, 2018

Products (1)

  • Cisco ASA 5500-X Series Firewalls

Known Affected Releases

9.7(1)

Description (partial)

Symptom:
- Even when the download does not fail as a hang, you can see stops. During both the stops and the hang you will see the TCP backoff mechanism taking place as TCP waits 3, 6, 12...seconds.
- The captures are taken from the ASA as well as the end device running the download. You will find that the inside interface and laptop are almost exactly the same even to the packet.
- The outside interface, on the other hand, is a mess. You will see tons of retransmissions, dup acks, and at the end the TCP backup off to a minute before cu kill the web connection.

Conditions:
FPR4120 running 9.7.1.4 with http inspection enabled.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.