problem with some sites after installed PIX-please help

Hi, Since I have replaced our old firewall with a PIX 515, people complains that they can not see some sites, it says Done with a blank screen. for some sites if you refresh you can see the page and for some others refresh wont help. Does anyone know how to fix this?

Thansk in advance-Rob

Reply to
Rob
Loading thread data ...

In article , Rob wrote: :Since I have replaced our old firewall with a PIX 515, people complains that :they can not see some sites, it says Done with a blank screen. for some :sites if you refresh you can see the page and for some others refresh wont :help. :Does anyone know how to fix this?

You -might- be hitting MTU problems. Are you permitting inward and outward icmp unreachable ?

Reply to
Walter Roberson

No, also MTU settings:

mtu outside 1500 mtu inside 1500 mtu DMZ 1500

the line is Fibre. Any other idea? Rob

Reply to
Rob

Not so much the MTU of your PIX interfaces, but rather MTUs 'upstream'. You probably need to allow incoming 'icmp unreachables' on your outside interface.

I'd recommend read>

Reply to
cf_0x2102

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.