topic Re: Single website not showing up as it should Cisco ASA in Network Security

Single website not showing up as it should Cisco ASA

jkay18041 — Fri, 21 Feb 2020 14:49:08 GMT

Not sure if this is an issue with our ASA or something else but a single website (msn.com) won't load properly on any computer in our network. We have a Cisco ASA 5516X with firepower. Would there be anything that could make a site no load properly?

thank you

Re: Single website not showing up as it should Cisco ASA

Flavio Miranda — Wed, 22 Nov 2017 20:39:09 GMT

Hi @jkay18041

You can go to a machine and on the command line you can type:

> nslookup msn.com

This should bring you an IP address. For example, here I got:

C:\Users\FLAVIOMI>nslookup msn.com
Server: MyRouter.Home
Address: 192.168.1.1

Non-authoritative answer:
Name: msn.com
Address: 13.82.28.61

Then, you can put 13.82.28.61 on the ASDM log page or configure a capture and see if ASA is blocking you.

-If I helped you somehow, please, rate it as useful.-

Re: Single website not showing up as it should Cisco ASA

jkay18041 — Wed, 22 Nov 2017 20:41:05 GMT

It doesn't block it, it just doesn't fully load the page.

Re: Single website not showing up as it should Cisco ASA

Flavio Miranda — Wed, 22 Nov 2017 20:44:50 GMT

Do you have a proxy on your network or any web filter?

The plugins that are missing on the web page may be coming from a different server, even network and this can be blocked.

-If I helped you somehow, please, rate it as useful.-

Re: Single website not showing up as it should Cisco ASA

jkay18041 — Wed, 22 Nov 2017 20:46:05 GMT

No proxy. All traffic goes direct to the asa then goes out.

Thank you

Re: Single website not showing up as it should Cisco ASA

Flavio Miranda — Wed, 22 Nov 2017 20:48:28 GMT

Try to do that test with IP address but instead putting the MSN ip address, put your machine IP address and look at the ASDM logs. You might see something being blocked.

-If I helped you somehow, please, rate it as useful.-

Re: Single website not showing up as it should Cisco ASA

Julio Carvajal — Wed, 22 Nov 2017 21:30:20 GMT

Hello,

Are you using the FirePower for HTTP inspection?

Do you have any active policies for HTTP?

We probably need to check the logs on the Firepower.

Re: Single website not showing up as it should Cisco ASA

jkay18041 — Thu, 23 Nov 2017 03:07:20 GMT

C:\Users\john>nslookup msn.com
Server: UnKnown
Address: 10.15.2.1

DNS request timed out.
timeout was 2 seconds.
DNS request timed out.
timeout was 2 seconds.
*** Request to UnKnown timed-out

This is what I got when I did the nslookup from a computer inside the network

Re: Single website not showing up as it should Cisco ASA

Flavio Miranda — Thu, 23 Nov 2017 03:14:15 GMT

Then you problem looks to be DNS.

Try one more thing:

Just like the test above, do this.

Type nslookup and press enter

Then type server 8.8.8.8 and press enter

Then type www.msn.com and press enter

Let's see what do you get.

-If I helped you somehow, please, rate it as useful.-

Re: Single website not showing up as it should Cisco ASA

jkay18041 — Thu, 23 Nov 2017 03:29:32 GMT

When I try that I get the correct IP address for www.msn.com

My internal windows dns servers use 8.8.8.8 and 8.8.4.4 as well as 4.2.2.2

Re: Single website not showing up as it should Cisco ASA

jkay18041 — Thu, 23 Nov 2017 03:51:28 GMT

When I put in www.msn.com I get the same thing. Any other website works.

I've opened a case with Cisco and am going to update the firepower module as it's fairly old.

See if that changes anything.