Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 43 replies
  • Subscribers 1 subscriber
  • Views 22645 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Web Security Performance Issues

StephenWeber
I've got multiple clients on ASG120 and ASG220 Appliances that once Web Security is Enabled the Web Surfing slows down to a crawl.  I upgraded a client from a 256k T1 to a 8Mbps Broadband Cable connection and they didn't see any improvement on Internet Speeds.  If I disable the Web Security, the Internet Speeds are blazing.  I've tried disabling AV Scanning and Caching which seems to help, but it still isn't that great.

Could there be something missing or is this just something 8.201?

My Config is as follows.

Web Security Enabled - Transparent Mode - Authentication is None.
URL Filtering is Allow by Default - Block Spyware Communication
We then have certain categories set to block

I have this same setup at other except for the Authentication being set at Agent.

Any suggestions would be helpful. It is definitely Web Security slow it down as when it is off the Internet is fast.


This thread was automatically locked due to age.
Parents
  • 0
    Here is a site that lists as pass, but never even after about 3 minutes with Web Security on loads.  Web Security Disabled and the site loads instantly.

    2011:10:26-09:27:03 FPHASG httpproxy[28663]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.201" dstip="184.31.244.31" user="" statuscode="301" cached="0" profile="REF_HttProOfficeLan (Office LAN)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="218" request="0x9d7ae58" url="www.express.com/.../html"
    2011:10:26-09:27:03 FPHASG httpproxy[28663]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.201" dstip="184.31.244.31" user="" statuscode="301" cached="0" profile="REF_HttProOfficeLan (Office LAN)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="239" request="0x9d7ae58" url="www.express.com/.../html"
    2011:10:26-09:27:04 FPHASG httpproxy[28663]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.201" dstip="184.31.244.31" user="" statuscode="200" cached="0" profile="REF_HttProOfficeLan (Office LAN)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="20463" request="0x9d7ae58" url="www.express.com/.../html"
    2011:10:26-09:27:04 FPHASG httpproxy[28663]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.201" dstip="184.31.244.31" user="" statuscode="200" cached="0" profile="REF_HttProOfficeLan (Office LAN)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="4246" request="0x9d00478" url="www.express.com/.../x-javascript"
    2011:10:26-09:27:04 FPHASG httpproxy[28663]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.201" dstip="184.31.243.29" user="" statuscode="304" cached="0" profile="REF_HttProOfficeLan (Office LAN)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0x9d105f8" url="cdn.mercent.com/.../Merchandising"
    2011:10:26-09:27:05 FPHASG httpproxy[28663]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.201" dstip="184.31.244.31" user="" statuscode="200" cached="0" profile="REF_HttProOfficeLan (Office LAN)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2341" request="0x9d00478" url="www.express.com/.../x-javascript"
    2011:10:26-09:27:05 FPHASG httpproxy[28663]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.201" dstip="184.31.244.31" user="" statuscode="200" cached="0" profile="REF_HttProOfficeLan (Office LAN)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="15029" request="0x9d00478" url="www.express.com/.../x-javascript"
    2011:10:26-09:27:05 FPHASG httpproxy[28663]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.201" dstip="184.31.244.31" user="" statuscode="200" cached="0" profile="REF_HttProOfficeLan (Office LAN)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1157" request="0x9d00478" url="www.express.com/.../x-javascript"
    2011:10:26-09:27:05 FPHASG httpproxy[28663]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.201" dstip="184.31.244.31" user="" statuscode="200" cached="0" profile="REF_HttProOfficeLan (Office LAN)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="5213" request="0x9d00478" url="www.express.com/.../css"
    2011:10:26-09:27:23 FPHASG httpproxy[28663]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.110" dstip="209.16.121.8" user="" statuscode="200" cached="0" profile="REF_HttProOfficeLan (Office LAN)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1149" request="0x9d10b98" url="now.baynews9.com/.../tnpl_user_v2_0;jsessionid=52EB46D4EF84FA515C8CE5E55743E073
Reply
  • 0
    Here is a site that lists as pass, but never even after about 3 minutes with Web Security on loads.  Web Security Disabled and the site loads instantly.

    2011:10:26-09:27:03 FPHASG httpproxy[28663]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.201" dstip="184.31.244.31" user="" statuscode="301" cached="0" profile="REF_HttProOfficeLan (Office LAN)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="218" request="0x9d7ae58" url="www.express.com/.../html"
    2011:10:26-09:27:03 FPHASG httpproxy[28663]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.201" dstip="184.31.244.31" user="" statuscode="301" cached="0" profile="REF_HttProOfficeLan (Office LAN)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="239" request="0x9d7ae58" url="www.express.com/.../html"
    2011:10:26-09:27:04 FPHASG httpproxy[28663]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.201" dstip="184.31.244.31" user="" statuscode="200" cached="0" profile="REF_HttProOfficeLan (Office LAN)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="20463" request="0x9d7ae58" url="www.express.com/.../html"
    2011:10:26-09:27:04 FPHASG httpproxy[28663]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.201" dstip="184.31.244.31" user="" statuscode="200" cached="0" profile="REF_HttProOfficeLan (Office LAN)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="4246" request="0x9d00478" url="www.express.com/.../x-javascript"
    2011:10:26-09:27:04 FPHASG httpproxy[28663]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.201" dstip="184.31.243.29" user="" statuscode="304" cached="0" profile="REF_HttProOfficeLan (Office LAN)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="0" request="0x9d105f8" url="cdn.mercent.com/.../Merchandising"
    2011:10:26-09:27:05 FPHASG httpproxy[28663]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.201" dstip="184.31.244.31" user="" statuscode="200" cached="0" profile="REF_HttProOfficeLan (Office LAN)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="2341" request="0x9d00478" url="www.express.com/.../x-javascript"
    2011:10:26-09:27:05 FPHASG httpproxy[28663]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.201" dstip="184.31.244.31" user="" statuscode="200" cached="0" profile="REF_HttProOfficeLan (Office LAN)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="15029" request="0x9d00478" url="www.express.com/.../x-javascript"
    2011:10:26-09:27:05 FPHASG httpproxy[28663]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.201" dstip="184.31.244.31" user="" statuscode="200" cached="0" profile="REF_HttProOfficeLan (Office LAN)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1157" request="0x9d00478" url="www.express.com/.../x-javascript"
    2011:10:26-09:27:05 FPHASG httpproxy[28663]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.201" dstip="184.31.244.31" user="" statuscode="200" cached="0" profile="REF_HttProOfficeLan (Office LAN)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="5213" request="0x9d00478" url="www.express.com/.../css"
    2011:10:26-09:27:23 FPHASG httpproxy[28663]: id="0001" severity="info" sys="SecureWeb" sub="http" name="http access" action="pass" method="GET" srcip="192.168.2.110" dstip="209.16.121.8" user="" statuscode="200" cached="0" profile="REF_HttProOfficeLan (Office LAN)" filteraction="REF_DefaultHTTPCFFAction (Default content filter action)" size="1149" request="0x9d10b98" url="now.baynews9.com/.../tnpl_user_v2_0;jsessionid=52EB46D4EF84FA515C8CE5E55743E073
Children
No Data
Unfiltered HTML