kind of figure out the cause, in ASA, there are whole bunch access rules, for restricted PCs, one of ASA rule put all accessible websites under that rule, but websites there are based on IP addresses but not web address (www.xxxx.xx), for those inaccessible websites, their IP addresses are not valid anymore, so now my question is how do I find the accurate IP address of a website. The IP I got from unrestricted PC by PING is not accurate/valid either, for example, I can access a website from unrestricted PC, and using ping, got the IP of this website, but just can’t use this IP to browse to the website which mean the IP is inaccurate or invalid (they are all done on unrestricted PC), Tried on some nslookup websites such as WHOIS, always got “the website you put in is invalid”. Do I have to contact every website webmaster to get the valid IP? It’s too much work. All helps are appreciated. thx
... View more
Has ASA5510-K8 as firewall, has access rules setup for restricted PCs: Source: IP range of these PCs 192.168.x.0/24 Destination: publicPC Service: tcp/http Interface: inside Action: permit On those PCs, users can only browse the websites that are in favorites, but some of them are working, some are not. Test on unrestricted PC, websites that can’t be accessed from public PCs can be access on regular PCs , either by address or IP. Checked GPO setting, don’t see anything wrong there. Can anyone please tell me what wrong and where should I start troubleshooting? Thx.
... View more