I have a PIX 515E, running PIXOS 6.3, which has fixup protocol http 80 in the configuration.
Can anyone point me to documentation that describes exactly what this does to web traffic.
Cisco's own command reference says:
fixup protocol http
The fixup protocol http command sets the port for Hypertext Transfer Protocol (HTTP) traffic application inspection. The default port for HTTP is 80.
Use the port option to change the default port assignments from 80. Use the port-port option to apply HTTP application inspection to a range of port numbers.
Note The no fixup protocol http command still enables the filter url command.
HTTP inspection performs several functions:
•URL logging of GET messages
•URL screening through N2H2 or Websense
•Java and ActiveX filtering
The latter two features must be configured in conjuction with the filter command.
We don't use WebSense on the PIX, and we don't need the PIX to perform URL logging - and we don't have filter commands enabled. Is there any reason why I shouldn't turn the fixup protocol off altogether? Certainly disabling that logging should improve performance (we already have URL logging using a separate WebSense box).