Troubleshooting lan via firewalls

[ohareka70]

Hello,

I completed my CCNP last year and am ok troubleshooting connections on the Corporate network in work with show commands, ping and traceroute.  But we also have cisco asa firewalls for the dmz servers and other connections within the LAN. 

Does anyone know of any good books i can purchase for advice on how to troubleshoot, ping, traceroute connections that go from the corporate lan and via the firewall.  Because ping is blocked through the firewall i can only traceroute so far but i want to learn which path or interface a packet is taking and need to know when i have to put a firewall rule in or a static route, etc.

Any good T-SHOOT type books for firewalls, especially cisco asa.

Kevin

[varrao]

Hi Kevin,

You can google and find a few docs on how to troubleshoot on the ASA and enable ping and traceroute options. One of them is this:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a0080094e8a.shtml

You can also check  the documents on this forum as well under the ASA section, they would also be helpful to you:

https://supportforums.cisco.com/community/netpro/security/firewall?view=documents

Thanks,

Varun