cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
349
Views
5
Helpful
1
Replies

ASA 5520 blocked IPS

Toomaj Zanguee
Level 1
Level 1

Hi Guys,

I need to know if there is a way to checl the IPs which are blocked to pass through the ASA 5520 firewall.

this firewall is doing the NAT for 3 IPs for me

  1. 192.168.20.21 -----NAT---->10.10.20.21
  2. 192.168.20.22 -----NAT---->10.10.20.22
  3. 192.168.20.23 -----NAT---->10.10.20.23

the number 2 & 3 are passing through but the first one cannot.

the ping is comming to the ASA and is stopped there

notice:

  • it has been working for 3 years
  • the initial config is done by some unproffesional guys and there is no rule on the firewall (permit any_any ) on all interfaces
  • ASDM is not configured to be used

I wonder to know if it is the firewall that is blocking the coming IP to the 10.10.20.21 IP ?

thanks

1 Reply 1

Maykol Rojas
Cisco Employee
Cisco Employee

Gabriel;

The packets are being blocked incoming or outgoing direction? Have u checked the logs on the firewall? It could be very possible that this is being blocked before it gets to the firewall.

Mike
Sent from Cisco Technical Support Android App

Mike
Review Cisco Networking for a $25 gift card