ACE: connection reset using Firefox

Question

Hi Community,
I'm expecting some problems with ACE. I've configured it to loadbalance between 4 nodes with SSL termination at ACE.
Everything was working fine up to the identification of a problem using firefox browser. With Chrome and IE works fine.
The user is trying to upload a file to one of the 4 nodes. When the costumer click at the send button, the Firefox shows the following message: Connection Reset.
Can you suggest some actions? This problem just happens when the user try to upload the file. Whe he's just surfing through the system, works fine.
Thank you in advance.
------ Configuration ------
ACE-01-SJPR/eproc4# sh runGenerating configuration....logging enablelogging timestamplogging trap 5logging buffered 7access-list acl_ALL line 5 extended permit ip any any access-list acl_ALL line 10 extended permit icmp any any probe snmp cpu_servers  version 2c  community Public  oid 1.3.6.1.2.1.25.3.3.1.2    threshold 60probe http pb_http  port 80  interval 5  passdetect interval 30  passdetect count 2  request method get url /eprocV2/index.php  expect status 200 200probe icmp pb_ping  interval 10  faildetect 2  passdetect interval 5  passdetect count 2rserver host eproc-1g-aplic-noh1  ip address 10.7.123.1  inservicerserver host eproc-1g-aplic-noh2  ip address 10.7.123.2  inservicerserver host eproc-1g-aplic-noh3  ip address 10.7.123.3  inservicerserver host eproc-1g-aplic-noh4  ip address 10.7.123.4  inservicerserver redirect srv_eproc4_https_redirect  description ## Redireciona trafego de HTTP para HTTPS ##  webhost-redirection https://%h%p 302  inserviceserverfarm host farm_eproc4  failaction purge  probe pb_ping  probe pb_http  rserver eproc-1g-aplic-noh1 80    cookie-string "eproc-1g-aplic-noh1"    inservice  rserver eproc-1g-aplic-noh2 80    cookie-string "eproc-1g-aplic-noh2"    inservice  rserver eproc-1g-aplic-noh3 80    cookie-string "eproc-1g-aplic-noh3"    inserviceserverfarm redirect farm_eproc4_https_redirect  description ## Redireciona trafego de HTTP para HTTPS ##  rserver srv_eproc4_https_redirect    inserviceparameter-map type http HTTP_PARAM  description Reuse TCP and Keep Persistence  case-insensitive  persistence-rebalanceparameter-map type ssl PARAMMAP_SSL_TERMINATION  cipher RSA_WITH_3DES_EDE_CBC_SHA  cipher RSA_WITH_AES_128_CBC_SHA priority 2  cipher RSA_WITH_AES_256_CBC_SHA priority 3  rehandshake enabledparameter-map type connection TCP_PARAM  description TCP Options for SSL  exceed-mss allowsticky http-cookie acecookie st_eproc4_cookie  cookie insert browser-expire  serverfarm farm_eproc4sticky http-cookie acecookie st_eproc4_https_redirect  cookie insert browser-expire  serverfarm farm_eproc4_https_redirectssl-proxy service CISCO-SSL-PROXY  key my.key  cert my-cert.pem  ssl advanced-options PARAMMAP_SSL_TERMINATIONclass-map type management match-any acesso_remoto  description ## Acesso Remoto ao ACE ##  2 match protocol telnet any  3 match protocol ssh any  4 match protocol icmp any  5 match protocol snmp anyclass-map type http loadbalance match-any https_redirect_eproc4  2 match http url /.*class-map match-all vip_eproc4_http  8 match virtual-address 10.7.3.252 tcp eq wwwclass-map match-all vip_eproc4_https  8 match virtual-address 10.7.3.252 tcp eq httpspolicy-map type management first-match acesso_mgmt  class acesso_remoto    permitpolicy-map type loadbalance first-match lb_eproc4_http  class class-default    sticky-serverfarm st_eproc4_cookiepolicy-map type loadbalance first-match lb_https_redirect  class https_redirect_eproc4    sticky-serverfarm st_eproc4_https_redirect  class class-default    sticky-serverfarm st_eproc4_cookiepolicy-map multi-match policy_vip_eproc4  class vip_eproc4_http    loadbalance vip inservice    loadbalance policy lb_https_redirect    loadbalance vip icmp-reply active    nat dynamic 4093 vlan 4093    appl-parameter http advanced-options HTTP_PARAM  class vip_eproc4_https    loadbalance vip inservice    loadbalance policy lb_eproc4_http    loadbalance vip icmp-reply active    nat dynamic 4093 vlan 4093    appl-parameter http advanced-options HTTP_PARAM    ssl-proxy server CISCO-SSL-PROXYinterface vlan 4039  description ## Interface lado SERVIDOR ##  bridge-group 1  access-group input acl_ALL  no shutdowninterface vlan 4093  description ## Interface lado SERVIDOR ##  bridge-group 1  access-group input acl_ALL  nat-pool 4093 10.7.3.253 10.7.3.253 netmask 255.255.255.255 pat  service-policy input policy_vip_eproc4  service-policy input acesso_mgmt  no shutdowninterface bvi 1  ip address 10.7.3.251 255.255.0.0  no shutdownip route 0.0.0.0 0.0.0.0 10.7.1.1

Answer 1

From my prior experience I have seen similar issues with firefox.
Please try using firefox for reproducing the issue and get the output for below :
show np 1 me-stats -shttp
Look for counter value
Exceed max buffer errors:                     16901    <<<<<  Check if the counter increase after the test.
you can try few times and in case if you see the value increasing for  “ Exceed max buffer errors”
I believe if you do the following and test that should fix it. I have seen similar issue with a customer and the below has fixed it.
configure set header-maxparse-length 65535 and set max-parse-time 65535 and set content-maxparse-length 65535
host1/Admin(config)# parameter-map type http http_parameter_map
host1/Admin(config-parammap-http)#
host1/Admin(config-parammap-http)# set content-maxparse-length 65535
host1/Admin(config-parammap-http)# set max-parse-time 65535
host1/Admin(config-parammap-http)# set header-maxparse-length 65535
host1/Admin(config-parammap-http)# length-exceed continue
Apply the above in multimatch policy :
appl-parameter http advanced-options http_parameter_map
Let me know the result after applying the above.