PIX 515 and Transfer Rates between Inside and DMZ

[SomeNetworkGuy]

We're running a PIX 515; one issue I am running into is that transfer rates (moving files over 1MB) from the Internal Network to the DMZ is slow, but copying from the DMZ to the Internal is fine. Andy Ideas? I've checked all the access-lists and conduit statements and have come up with nothing as of yet other than it being that the Inside is set at a higher security level... Any help is much appreciated

Thanks

 

[yizhar]

HI.

Can it be a simple network cabling or other hardware issue?

For the PIX, try debugging using a SYSLOG server and/or "logging buffer" command.

How are you copying the file? using MS networking (SMB)?
Have you tried the same using FTP, HTTP, TFTP or other protocols?
How is name resolution done? Are you using IP addresses or computer names?

Which computer initiates the file transfer? how?

What is the PIX version?
Can you post the relevant PIX config?
Can you post the "show version" output?

What NIC is installed as the DMZ interface of the PIX?

Look here -

http://www.cisco.com/warp/public/110/21.html

If you're trying to use MS networking, then:
a. MS RPC,NETBIOS, and SMB, need a wide range of open ports, and normaly it is not accepted over the firewall. Servers in DMZ should not support SMB connections to internal hosts in most scenarios.
b. If you're insisting on using MS networking, then you must use a mean of name resolution.
c. I have written a small program for testing MS network bottom line performance. It is available from here:

http://teachers.sivan.co.il/yizhar#nuts

However there are more advanced tools in the Internet for better diagnostic.

Bye

Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar