I have a subnet for guest network access, both wired and wireless. We have a Netgear ProSafe that is trunked to a Cisco 2901 performing 'Router-on-a-Stick'. For most internal traffic, it all stays behind the ASA. But for guest traffic, I have a ro...
i get a syslog message "deny tcp (no connection) from 173.46.173.5/16220 to HGREAK_GLB/443 flags RST on interface outside" when I am trying to access a website that is on my DMZ from internal. The browser displays "cannot display the webpage". Pl...
Hello,Is there an easy way to allow our public VLAN to only access the internet, but not the other networks? I think there are two ways to do this:- Outside is Security Level 0, Public is level 10 and all inside networks are above 10, for example 100...
if ASA 8.3 uses real IP address in ACL, why in this example "ASA 8.3 and Later: Mail (SMTP) Server Access on Inside Network Configuration Example" uses the public (natted) ip address for the smtp server ACL?
Hi All,I'm in a sort of "half way house" situation with an ASA running 8.3(1), a range of public IP addresses and a requirement to access many different internal hosts using a series of port forwarding options. I have read (and understand fully) the ...
Hi,Got a pair of 5510's in Active/Passive failover config. Been in and running for about 9 months. Running 8.3(1)About 3 weeks ago I started seeing the units failing over on an almost daily basis. Failover has hardly ever happened before then.Can any...
I've got email logging for a few specific syslog messages working and sending to an email server on the inside network. However, the source IP ends up being the DMZ interface. Is there a way to force it to use the inside IP instead?ASA Code Version...
Hi, try do configure DNS translation for static NAT.it fails with this error message: Failed to generate delta configThe following command have not been recognized by the Configuration Parser:==============================(DMZ,OUTSIDE) static (hostna...
After basic installation (local) with nat,some ACLs and ssh-access I changed in ASDM the privilege level from my username from level 2 to level 15.The result is that I can´t load configuration with ASDM and the following error message appears: ASDM d...
So, I've set up Anyconnect client access to an ASA-5510.I've got a handful of interfaces, which contain hosts that should be accesible to anyconnect clients. I'm unable to reach addresses on a specific network, due to what packet-tracer claims is an...
Hi all :Just a general and paratical question to ask.If I use static nat a real IP from DMZ to a mapped IP at Outside network, can the mapped IP be ping from the DMZ?Assume that the hosts at dmz and outside can access each other by the rule of permit...
