PC behind ASA suddenly not able to browse to website

[Mohd Khairul Nizam]

Hi,
Last 2 day, network cable between ASA and SW faulty, thus we have changed it.
but after that , weird think is email not able to send/receive and unable to open google.com, gmail.com

the user using smtp.gmail.com & pop.gmail.com 

other URL website able to open.

weird ??

anyone can help

attached is the config

[Dennis Mink]

can you ping fw, and 8.8.8.8?

[Mohd Khairul Nizam]

from the PC, unable to ping 8.8.8.8

but from the ASA console able to ping 8.8.8.8 & 8.8.4.4

[Dennis Mink]

can you ping the internal ip address of the asa from PC? 

[Mohd Khairul Nizam]

yes, we can
pls note that, PC able to access all website except google & gmail
which is not logic at all...

[aaron.hackney]

If you can access everything except google products, then there could be a few things going on, few of which are firewall related.

1. The hosts file could be corrupt on the host. Does DNS resolve for these sites?

2. Your NATed IP could be blacklisted by Google

3. Your firewall could have a shun for some critical google IP. 

show shun

4. There is a corrupt session in the browser. Try a private window.

Personally, I would t-shoot this with a packet capture on the firewall and examine the results in Wireshark.

[Mohd Khairul Nizam · Accepted solution]

just to update

the issues is resolved.

the resolution is have to manually use Google DNS in order the traffic to go through.
Just a little bit weird,