topic Re: Cannot access certain websites in Network Security

Cannot access certain websites

aamercado — Mon, 11 Mar 2019 12:35:42 GMT

ASA 5520 with 7.2.1.

I cannot access certain websites. For example, www.nationalunderwriter.com

The capture attach shows asa-ca as a good working capture to compare with a asa-uk which is the bad capture. Note the negotiation is all 0 (ie window is 0). I already tried CCO exceed-mss workaround and still no worky so pretty sure it is not a mss issue

Re: Cannot access certain websites

JORGE RODRIGUEZ — Thu, 24 Apr 2008 02:29:56 GMT

What error message are you getting on the browser, page not found? have you done any trace routes to that website IP address from your uk edge and see if your ISP does actually have a route to that site, I had very similar issues with couple of site and turned our ISP peering had routing problems. You may want to do a trace route from ca edge and compare it with uk trace and see how is handed off.

Rgds

Jorge

Re: Cannot access certain websites

aamercado — Thu, 24 Apr 2008 23:41:54 GMT

The error defaults to microsoft search page:

http://search.live.com/results.aspx?FORM=DNSAS&q=69.61.137.183

Traceroutes is fine and the capture I posted does show that the website responds but it breaks because the tcp negotiations is off