<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Traffic goes from ASA &amp; comeback on same  problem in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/traffic-goes-from-asa-comeback-on-same-problem/m-p/1891688#M457432</link>
    <description>&lt;P&gt;Hi,&lt;/P&gt;&lt;P&gt;My internet link is connected on Internet Router &amp;amp; below downwards Cisco ASA 5520 is connected.ASA is connected with core switch cisco 4510 on downwards.&lt;/P&gt;&lt;P&gt;our webbased mail url owa.test.com is hosted outside.&lt;/P&gt;&lt;P&gt;Lets suppose ISP pool is 4.4.4.0/28.suppose owa server is Static natted on ASA with 4.4.4.4. my machine traffic is going to internet with same ISP with the help of PAT on Cisco ASA &amp;amp; internet is working on my machine. if i want to access owa.test.com or ip base for mail access, its not working &amp;amp; also it is not pinging. i suppose to ASA is blocking for returning traffic.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;is there any way to traffic will go via same Firewal &amp;amp; comeback on same firewall port?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Please help us how to resolve it.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Vinod Kumar Gupta&lt;/P&gt;&lt;P&gt;9810966625&lt;/P&gt;</description>
    <pubDate>Mon, 11 Mar 2019 22:50:16 GMT</pubDate>
    <dc:creator>vinodk_gupta</dc:creator>
    <dc:date>2019-03-11T22:50:16Z</dc:date>
    <item>
      <title>Traffic goes from ASA &amp; comeback on same  problem</title>
      <link>https://community.cisco.com/t5/network-security/traffic-goes-from-asa-comeback-on-same-problem/m-p/1891688#M457432</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;&lt;P&gt;My internet link is connected on Internet Router &amp;amp; below downwards Cisco ASA 5520 is connected.ASA is connected with core switch cisco 4510 on downwards.&lt;/P&gt;&lt;P&gt;our webbased mail url owa.test.com is hosted outside.&lt;/P&gt;&lt;P&gt;Lets suppose ISP pool is 4.4.4.0/28.suppose owa server is Static natted on ASA with 4.4.4.4. my machine traffic is going to internet with same ISP with the help of PAT on Cisco ASA &amp;amp; internet is working on my machine. if i want to access owa.test.com or ip base for mail access, its not working &amp;amp; also it is not pinging. i suppose to ASA is blocking for returning traffic.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;is there any way to traffic will go via same Firewal &amp;amp; comeback on same firewall port?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Please help us how to resolve it.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Vinod Kumar Gupta&lt;/P&gt;&lt;P&gt;9810966625&lt;/P&gt;</description>
      <pubDate>Mon, 11 Mar 2019 22:50:16 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/traffic-goes-from-asa-comeback-on-same-problem/m-p/1891688#M457432</guid>
      <dc:creator>vinodk_gupta</dc:creator>
      <dc:date>2019-03-11T22:50:16Z</dc:date>
    </item>
    <item>
      <title>Re: Traffic goes from ASA &amp; comeback on same  problem</title>
      <link>https://community.cisco.com/t5/network-security/traffic-goes-from-asa-comeback-on-same-problem/m-p/1891689#M457434</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hi,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;What I understand from your post the situation is the following&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;You have a mail server on your inside network&lt;/LI&gt;&lt;LI&gt;Its NATed to a public IP from your ISP&lt;/LI&gt;&lt;LI&gt;The public IP has DNS name of owa.test.com associated with it&lt;/LI&gt;&lt;LI&gt;You are connecting to the mail server from your inside network with the DNS name?&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;If this is the case can you please provide me with the following information&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;the &lt;STRONG&gt;"static"&lt;/STRONG&gt; command for the mail server (you can leave out the actual IPs if needed)&lt;/LI&gt;&lt;LI&gt;Is the DNS server you local computer uses located in the Internet or your local network?&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I think you will need the ASA to handle the DNS replies that are coming from a DNS server from the outside network&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;This would require that you have a &lt;STRONG&gt;"dns"&lt;/STRONG&gt; parameter in your &lt;STRONG&gt;"static"&lt;/STRONG&gt; nat command for the mail server.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;For example likes this (presuming you are running software 8.2 or earlier):&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;static (inside,outside) 4.4.4.4 x.x.x.x netmask 255.255.255.255 &lt;SPAN style="color: #ff0000;"&gt;dns&lt;/SPAN&gt;&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;If you are running 8.3 or newe software the same would be&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;object network MAIL-SERVER&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt; host x.x.x.x&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt; nat (inside,outside) static 4.4.4.4 &lt;SPAN style="color: #ff0000;"&gt;dns&lt;/SPAN&gt;&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Hope this helps.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Please rate if it was any of any help &lt;SPAN __jive_emoticon_name="happy" __jive_macro_name="emoticon" class="jive_macro jive_emote" src="https://community.cisco.com/images/emoticons/happy.gif"&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;- Jouni&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Wed, 04 Apr 2012 07:01:04 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/traffic-goes-from-asa-comeback-on-same-problem/m-p/1891689#M457434</guid>
      <dc:creator>Jouni Forss</dc:creator>
      <dc:date>2012-04-04T07:01:04Z</dc:date>
    </item>
  </channel>
</rss>

