cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
302
Views
0
Helpful
2
Replies

ASA 5525 Facebook is not loading if you are on the nat/pat address - Need Help.

BRAD VAUGHN
Level 1
Level 1

We have an asa 5525 that went online last month.  Because of the nature of our business, we don't block users from going anywhere.  Over the last two days, users are unable to get to facebook.  Upon investigating this, I've found that if you are a regular user your are going out on a NAT/PAT address equal to the outside interface.  These people are unable to reach facebook, but can get to any other website.  If I create/assign a static NAT to a PC which I did to mine using one of the free numbers in our public block, you can get to facebook.  Other than rebooting the ASA to see if that clears something, I don't know what to check.  Any help would be much appreciated!

Thanks

2 Replies 2

Vibhor Amrodia
Cisco Employee
Cisco Employee

Hi,

My suggestion , Check for blacklisting of IP address:-

http://mxtoolbox.com/blacklists.aspx

Thanks and Regards,

Vibhor Amrodia

I'll check it when I go into work on Monday.  The site you sent looks like it only deals with email servers that send spam.  This is just a pat'ed address that people surf through.  It does not pass smtp outbound.  Do these blacklists still apply in that case?  Thanks for your help.

Review Cisco Networking for a $25 gift card