I am banging my head here trying to figure out why I can't get Exchange email to flow. I have this same setup at a different site with no issues. I have the settings mirrored to this new site and Exchange email will just not flow. I currently have ...
I am starting to convert our ASA 5516x over to FTD image. Since we have 12 different sites I have to setup Site-to-Site VPN for connectivity. This is simple and I have it working, however I am wondering if I can put all the NAT objects into 1 Group...
All,I am starting to convert all my 5516x ASA with FirePower Services over to the full FTD image. I have 22 total to convert and have successfully converted 4 of them over. Now that those 4 are on full FTD image I need to use Smart Licensing instea...
I am not sure what is going on, or why this is happening. We have 15 ASA with FirePower Services, and one true FTD that was just converted. I logged into FMC and see that its been deploying a Security/Rule update for over 10hrs now to all my device...
I have a new 5516 ASA that I am trying to get working with our internal Exchange server. For some reason it only works internally. I am not able to hit: https://mail.mydomain.com from the outside.
I have read through the different types of NAT rul...
I finally have things working as they should. Turns out it was a provider issue with an upstream device holding onto the mac/arp table. I have an on-prem provider device that I kept rebooting, but that never solved the issue. By doing the command ...
Hi Rob, I was able to test again and discovered that when I apply the Static NAT rule for exchange for inside IP mapped to outside exchange IP then my internal exchange server can no longer reach inet. If I remove that NAT rule, then the internal ex...
Hi Rob, So I can "test" these commands on a live FTD that is working just so I can see what the output should look like, minus the different IPs. As for a Packet Capture on the inside interface I am not seeing how this would work. An inside host wou...
Perfect, these are the answers I needed to know. Appears we are using IPS within our ACP rules, so will get Threat quoted. Will look to get both Threat and URL together so its easier to renew each time. Thanks, Ken~
Hi Tim,
I made the cut last night by changing my default route to point to the new inside ASA. Then shutdown the outside of the old ASA. Waited a few hours and boom! My https://mail.mycompany.com started to work.
I tried to get a hold of the provi...
