topic Re: ASA - Troubleshooting Steps in Network Security

ASA - Troubleshooting Steps

Amin Shaikh — Mon, 11 Mar 2019 13:32:08 GMT

Hi,

What troubleshooting steps are required to see if the traffic is passing from a specific host from internal network to DMZ or from outside to inside...

Re: ASA - Troubleshooting Steps

dhananjoy chowdhury — Sun, 17 Aug 2008 17:51:41 GMT

Hi,

A good step would be to go through the traffic logs.

However, if you dont want to go for logging/ syslog, these commands can be helpfull...

- "show access-list" >> to check the access-list hit count for that traffic.

- "show connection" >> to verify the entries in the connection table for your interesting traffic.

- "show xlate" >> to verify the entries in the NAT transalation table , whether correct NAT is configured or not.

Re: ASA - Troubleshooting Steps

Tshi M — Sun, 17 Aug 2008 23:24:07 GMT

You can also use ASDM and filter the interesting traffic.

Re: ASA - Troubleshooting Steps

purohit_810 — Mon, 18 Aug 2008 01:49:29 GMT

If you would capture traffic for VPN.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00808c9a87.shtml

If you would capture traffic for specific source and destination:

http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a00807c35e7.shtml

Configure above captures.

Thanks,

Dharmesh Purohit