dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
8
share rss forum feed

aryoba
Premium,MVM
join:2002-08-22
kudos:4
reply to HELLFIRE

Re: Burned by IP INSPECT -- My Own Personal Journey

said by HELLFIRE:

said by aryoba:

I have been testing reliability of HTTP/HTTPS IP Inspection features on IOS and the results are never good.

Do you mind sharing some specific examples (non-NDA protected ones, of course) of what you experienced?
Like I said, this was a home environment rather than prod (thanks be for THAT!), so I just wanted to hear about
other experiences from the field for personal reference and learning.

Basically you can test HTTP/HTTPS inspection against any application such as Youtube for video streaming or news feed. I find the best application to troubleshoot and/or test is live streaming or constant traffic flowing since you can actually monitor any slowness or problems in real time. Start from some configuration template and tune your way in during test to get the best result. Time outs or keepalives, buffer sizes, are some factors you can tune. If you are unsure which factors you can tune, reading Cisco online documentations on the IOS command you are testing while doing the test I always find helpful.