Hi everyone   I'm having an odd issue with Cisco Catalyst Switches. We have several VLAN (more than a 100) where we use 4500-X VSS as the distribution Layer, and 2960X stacks as Access Layer (10 stacks directly attach to the 4500X VSS).   The 4500-X VSS is the default gateway for 4 VLANs. a few weeks ago, one of this VLANs began to fail. Where users in it cannot reach any device outside the stack where they connect.   For testing, we assigned an IP in this VLAN to the 2960X stack, we see that this stack (access layer), also, cannot ping anything outside it. But all other VLANs that reside in this same stack does not have this issue.   We look at the trunk links to see if the VLAN disappear from it, we look the "show vlan" output to see if the VLAN was remove from the stack (because we are using VTP to replicate all the VLANs).   Have you ever had a similar issue? can you recommend something?   Regards     ... View more

Hi everyone Is there a way to allow access to corporate google mail while blocking access to personal emails accounts on google? We are working with an ASA5545 with Firepower Services. Hope you can help me with this doubt. Regards ... View more

Hi everyone Hope you can help me with this issue. I set up an ASA5516X in a network that has asymmetric routing, but now we are having issues with ICMP and a XMPP app. I'm asuming that both symptoms occur for the same reason. The internet connection is attached to our ASA, but we have a data connection with a remote office that arrive directly to the local network. Default gateway for Server XMPP is the ASA, when we ping from the server to the PC on the remote office there is no problem with it, however, when we ping from the remote PC to the Server, the ASA seems to be blocking the icmp reply from the Server. We already configure TCP-state-bypass on the ASA, enable ICMP inspection on a policy-map and allow communication inter-interface We did some captures on the ASA, receiving this output ciscoasa(config-pmap-c)# capture PING interface inside real-time Warning: using this option with a slow console connection may result in an excessive amount of non-displayed packets due to performance limitations. Use ctrl-c to terminate real-time capture 1: 04:06:25.634183 arp who-has 192.168.1.254 (ff:ff:ff:ff:ff:ff) tell 192.168.1.50 2: 04:06:25.644116 arp reply 192.168.1.254 is-at 0:0:ab:3b:c0:0 3: 04:06:27.166602 arp who-has 192.168.1.254 (ff:ff:ff:ff:ff:ff) tell 192.168.1.50 4: 04:06:27.176626 arp reply 192.168.1.254 is-at 0:0:ab:3b:c0:0 5: 04:06:28.274201 arp who-has 192.168.1.254 (ff:ff:ff:ff:ff:ff) tell 192.168.1.50 6: 04:06:28.284256 arp reply 192.168.1.254 is-at 0:0:ab:3b:c0:0 7: 04:06:29.553544 192.168.1.50 > 192.168.2.2: icmp: echo reply 8: 04:06:31.011336 192.168.1.50 > 192.168.2.2: icmp: echo reply 9: 04:06:33.838823 192.168.1.50 > 192.168.2.2: icmp: echo reply 10: 04:06:37.023085 192.168.1.50 > 192.168.2.2: icmp: echo reply (this is when we ping from the remote PC, when we ping from the local lan to the remote office we receive this output ciscoasa(config-pmap-c)# capture PING interface inside real-time Warning: using this option with a slow console connection may result in an excessive amount of non-displayed packets due to performance limitations. Use ctrl-c to terminate real-time capture 1: 04:08:26.833483 802.3 encap packet 2: 04:08:28.355526 192.168.1.50 > 192.168.2.2: icmp: echo request 3: 04:08:28.356381 192.168.1.50 > 192.168.2.2: icmp: echo request 4: 04:08:29.888473 192.168.1.50 > 192.168.2.2: icmp: echo request 5: 04:08:29.889282 192.168.1.50 > 192.168.2.2: icmp: echo request 6: 04:08:31.422707 192.168.1.50 > 192.168.2.2: icmp: echo request 7: 04:08:31.423531 192.168.1.50 > 192.168.2.2: icmp: echo request 8: 04:08:32.982874 192.168.1.50 > 192.168.2.2: icmp: echo request 9: 04:08:32.983698 192.168.1.50 > 192.168.2.2: icmp: echo request 10: 04:08:34.560395 192.168.1.50 > 192.168.2.2: icmp: echo request 11: 04:08:34.561158 192.168.1.50 > 192.168.2.2: icmp: echo request Is there any issue with asymmetric routing that is impacting the icmp packets and xmpp connectiongs? Note: We replicate the scenario in GNS3 as we have limited access to the functional ASA Best regards ... View more

Hi everyone   Hope you can help me with this issue, we had an ASA5525X with Prime Security Manager. According to the documentation, this PRSM is able to Prioritize applications, but I'm not able to find how to do this.   We had the AVC and WSE licenses. Did I need something more to do this?   Thank you all   Best Regards   Alvaro Rugama Cerda ... View more

Hi everyone   I'm having an odd behavior on all of my SG300.   We have 4 Vlans configured on all the SG300, management, voice, data and wireless vlan. During the day the SG300 management ip lost connectiviy, so I'm not able to manage it or ping it.   But the devices attached to this equipoment never lost connectivity. I already upgrade the firmware version to the last one 1.4.0.88 with the latest boot image 1.3.5.06; nothing has change.   This behavior began with the new year, last year it was working ok, and no changes has been made to the network. We also take a new SG300, configured it again from scratch, but this one is also losing its connectivity.   Sorry for my english, it's not my native language.   Hope you can help me with this; having issues with the Prime Infrastructure that cannot reach this devices.   Best Regards   Alvaro Rugama ... View more

Hi everyone   Hope you can help me with this issue, I'm configuring a new ASA-CX 5525, it came with PRSM version 9.1.1; we are trying to update it to 9.2.x or later.   I already download several versions of the upgrade package, several times to avoid download errors or issues on the file. However I'm unable to upgrade it.   Everytime I tried to upgrade it, it gave different kind of error messages. I attached an image of some of the messages we get. There are other errors that I couldn't capture.     Don't know what we are doing wrong. ASA hardware is on version 9.1.5, we also try version 9.2.2, but it didn´t work.   I will appreciate any kind of advise or help that you can provide me.   Best Regards   Alvaro Rugama ... View more