About carlos.garza

carlos.garza · 11-02-2015

I've got an ASA with two "outside" interfaces and twelve "inside" interfaces. One of those twelve inside interfaces is called "Guest_Wifi" and all it has access to is the internet. Some of the resources it needs access to are resources on another in...

carlos.garza · 05-13-2015

I made some changes to our threat-detection by enabling the ability to shun hosts and included networks to exclude from shunning. Since then the threat-detection rates for scanning-threat are missing from my config:COFW01# show run | inc threat-dete...

carlos.garza · 04-17-2015

I see several of these errors every few seconds in ASDM: 4Apr 17 201512:54:22 No matching connection for ICMP error message: icmp src Processing:10.182.12.106 dst Office:10.181.10.10 (type 3, code 3) on Processing interface. Original IP payload: ...

carlos.garza · 04-17-2015

We have a Cisco ASA 5525 which we use for everything! When inside the office and we attempt to hit an intranet website via the server name (http://server) we have no issues but when connected via VPN and accessing the same server, the web filter will...

carlos.garza · 03-05-2015

I'm configuring our ASA and we have two AT&T circuits which we're only using one with our current Juniper firewall. I know the ASA doesn't support policy based routing so I'm wondering if the following hypothetical "config" is possible. External Inte...

carlos.garza · 04-24-2015

show ip:GigabitEthernet0/0 ATT_00 X.X.X.X 255.255.255.192 CONFIGGigabitEthernet0/1 ATT_01 X.X.X.X 255.255.255.224 manualPort-channel1.110 vlan_110 10.181.10.1 255.25...

carlos.garza · 04-22-2015

Yes we do have icmp error inspection enabled.I know for a fact that 10.181.10.10 is listening to port 53 because it's a domain controller and is open to take DNS requests. How can I troubleshoot this further? Carlos

carlos.garza · 04-22-2015

We already have rules in place allowing any access to all of our intranet servers and those rules work well when in the office but when connected via VPN and we then attempt to access intranet servers via their hostname only; do we receive the web fi...

carlos.garza · 02-13-2015

That's what I initially had setup but was wondering if there was another way. Either way, this method does the job.

Member Since	‎02-03-2015 08:36 AM
Date Last Visited	‎08-18-2017 03:50 AM
Posts	11

User Statistics

User Activity

Guest\Public_Wifi Interface needs access to internal resource via external IP

"threat-detection rate scanning-threat" commands are missing

Syslog ID: 313005 "No matching connection for ICMP error message:"

CX Web Filter blocking local server traffic when connected via VPN

Two external interfaces; one to be used for outboud; second to be used for incoming VPN\Web traffic.

show ip:GigabitEthernet0/0

Yes we do have icmp error

We already have rules in

That's what I initially had