topic Re: ios firewall drop ms-exchange pkt in Network Security

ios firewall drop ms-exchange pkt

yayasolenet — Mon, 11 Mar 2019 13:28:15 GMT

Hi,

Can anyone tell me what IP inspections really inspect?

I have 2 sites connected through site-to-site vpn. ACL allows ip packets going through both sites. But the application level firewall still inspect the packets and droppes smtp packets between 2 private network.

I've found some paper in ms support. Here is the link.

http://support.microsoft.com/kb/924237

Can anybody tell me how to configure the firewall to make exchange work between site-to-site vpn?

Thanks,

Re: ios firewall drop ms-exchange pkt

joe19366 — Fri, 08 Aug 2008 04:04:32 GMT

I have clients that have exchange server bridgeheads in different offices through cisco ios and asa ipsec tunnels.

Please post your configurations.

I suspect you have something in there we can clear up.

-Joe

Re: ios firewall drop ms-exchange pkt

jmtorne — Mon, 11 Aug 2008 14:34:39 GMT

Hi,

I've had similar problems in the past, both with CBAC in IOS and PIX software, that were caused by the SMTP inspection engine.

If you're just trying to route SMTP traffic through the VPN, try to deactivate the SMTP inspection as follows:

(config)# no ip inspect name XXXX smtp

where XXXX is the name of the inspection (CBAC) rules.

At least that worked for me. Hope it helps!