cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1073
Views
0
Helpful
2
Replies

ASA 5504 inspection problem

nprdomingo
Level 1
Level 1

Hi,

We had implemented a Cisco ASA replacing a Sidewinder FW on our network. The Network has an ironport proxy even before which does HTTP connect (converting port 1-6553 to port 80). When we migrated from Sidewinder to ASA we made all the flow and policies and even natting the same.

The problem is, there are websites that the user cannot access. Seems like it is blocked by the firewall. Those websites where working before on Sidewinder FW but have problems when migrated to ASA. All is fine when we bypass the FW by connecting to F5 load balancer port. So ASA is the problem as isolated. All tcp, ip, and UDP traffic from Proxy are allowed to pass on the ASA but still encountering the problem. I am looking at the inspection policies or other policies that ASA has. Hope someone can help me turn off those inspection policies or whatever is making the ASA filtering so intensive.

Thank you,

Neil

2 Replies 2

rleivaoc
Cisco Employee
Cisco Employee

Can you post the configuration, and include some logs when the issue is happening?

Sent from Cisco Technical Support iPhone App

Vinay Sharma
Level 7
Level 7

Moving your Question to ASA community.

thanks,

Vinay

Thanks & Regards
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card