Cisco ASA5520 Blocks email to/from Cell Phones

[PETER GREENAN]

Hi,

  I have erecently installed a Meraki (Now Cisco) Wireless Access Solution for my company. I have configured 2 SSID's, one for Wiress access to our LAN and the other for Guest access to the Internet only. These appear to work quite well, however some users are complaining that the email clients on their cell phones do not work when using this Wireless System. Web Mail Apps work fine however.

Internet Access is via our Cisco ASA5520 and I strongly suspect this is the culprit. I have opened all ports associated with cell phones but still it does not work. Has anyone seen this kind of thing before?

Pete

[Julio Carvajal]

Hello Peter,

In order to determine if the problem is related to the FW you will need to take captures of the traffic when a client attempts to send email

Here is the link about how to use captures on the asa

http://www.cisco.com/en/US/products/ps6120/products_tech_note09186a0080a9edd6.shtml

With that we will be able to determine if the packets are getting stucked somewhere else or if this is an ASA problem,

Cheers,

Julio Carvajal Segura

[PETER GREENAN]

Thank you Julio. That's a very useful link. I will try this and let you know what I find.

Best Regards

Pete

[Julio Carvajal]

Hey man my pleasure to help,

Let me know how it goes and remember to rate all of the helpful posts

For Networking Posts check my blog at http://laguiadelnetworking.com/

Cheers,

Julio Carvajal Segura

[PETER GREENAN]

Ok, so I have run a packet trace using the Meraki Access Point as the source. Using my cell phone, I try to sync my virgin mobile email account. I see packets going to a number of servers and used Reverse DNS to identify these. All addresses are for Meraki, Facebook and Samsung Social Hub. No attempt to connect to Virgin Media.

Yesterday I connected a dumb access point (Not Meraki) to our production network - tested - same issue. The common factor here is the firewall.

Pete

[PETER GREENAN]

It's working now. It was something to do with my access-list. I had all the right ports in there but for some reason it was ignoring them. I stripped it out and allowed eveything outbound. Access is now restricted using the built in firewall on the Meraki Controller.

Thanks for your help Julio