Additional Information: The server is sending an http request to the public facing url, which gets dns resolved to an outside address that gets nat'ed to this server.  If I put 192.168.1.40 => 192.168.1.40 in the packet tracer, it fails on rule 35/36.  If I put 192.168.1.40 => it works in the packet tracer.  It doesn't however work.  If I go to my browser (on the target server) and try and hit the web site it doesn't pass. Sounds like a "u-turn" rule is needed in the router.  Is this possible? Another consideration here is that I must hit the pulic url, not the ip.  For example, this server hosts many web sites, and uses host header to resolve which site is being accessed. For example, site1.myserver.com, and site2.myserver.com.  Both on same IP. Is it possible to configure a rule to do the u-turn? ... View more

I used Packet Tracer (a GUI tool) to determine which NAT rule was blocking the traffic I am trying to allow.  It was rule 35 & 36 as shown in my original post.  I attempted to correlate the gui rule to the cli.  I don't know if i picked the correct cli rule or not.  That is why I showed both of them. Since rule 35 is dynamic, I tried: Result of the command: "show run dynamic" crypto dynamic-map outside_dyn_map 20 set pfs group1 crypto dynamic-map outside_dyn_map 20 set transform-set ESP-3DES-SHA This rule is part of the VPN setup I think, which would make sense because I had a consultant set it up for me. Result of the command: "show run global" global (inside) 1 interface global (outside) 1 interface global (outside) 199 xxx.xxx.249.200 nat (inside) 0 access-list inside_nat0_outbound nat (inside) 199 access-list Mail nat (inside) 1 0.0.0.0 0.0.0.0 Result of the command: "show run static" static (inside,outside) tcp xxx.xxx.235.13 ftp 192.168.1.20 ftp netmask 255.255.255.255 static (inside,outside) tcp xxx.xxx.249.200 smtp 192.168.1.119 smtp netmask 255.255.255.255 static (inside,outside) tcp xxx.xxx.249.196 www 192.168.1.100 www netmask 255.255.255.255 static (inside,outside) tcp xxx.xxx.249.197 www 192.168.1.101 www netmask 255.255.255.255 static (inside,outside) tcp xxx.xxx.249.198 www 192.168.1.102 www netmask 255.255.255.255 static (inside,outside) tcp xxx.xxx.249.199 www 192.168.1.103 www netmask 255.255.255.255 static (inside,outside) tcp xxx.xxx.235.1 https 192.168.1.109 https netmask 255.255.255.255 static (inside,outside) tcp xxx.xxx.235.2 https 192.168.1.110 https netmask 255.255.255.255 static (inside,outside) tcp xxx.xxx.235.3 https 192.168.1.111 https netmask 255.255.255.255 static (inside,outside) tcp xxx.xxx.235.4 https 192.168.1.112 https netmask 255.255.255.255 static (inside,outside) tcp xxx.xxx.235.5 https 192.168.1.113 https netmask 255.255.255.255 static (inside,outside) tcp xxx.xxx.235.6 https 192.168.1.114 https netmask 255.255.255.255 static (inside,outside) tcp xxx.xxx.235.7 https 192.168.1.115 https netmask 255.255.255.255 static (inside,outside) tcp xxx.xxx.235.8 https 192.168.1.116 https netmask 255.255.255.255 static (inside,outside) tcp xxx.xxx.235.9 https 192.168.1.117 https netmask 255.255.255.255 static (inside,outside) tcp xxx.xxx.235.10 https 192.168.1.118 https netmask 255.255.255.255 static (inside,outside) tcp xxx.xxx.235.11 https 192.168.1.119 https netmask 255.255.255.255 static (inside,outside) tcp xxx.xxx.235.12 https 192.168.1.120 https netmask 255.255.255.255 static (inside,outside) tcp xxx.xxx.235.13 https 192.168.1.121 https netmask 255.255.255.255 static (inside,outside) tcp xxx.xxx.235.13 www 192.168.1.121 www netmask 255.255.255.255 static (inside,outside) tcp xxx.xxx.235.14 ftp 192.168.1.122 ftp netmask 255.255.255.255 static (inside,outside) tcp xxx.xxx.235.14 ftp-data 192.168.1.122 ftp-data netmask 255.255.255.255 static (inside,inside) tcp xxx.xxx.235.6 1443 192.168.1.40 1443 netmask 255.255.255.255 static (inside,outside) tcp xxx.xxx.235.5 1443 192.168.1.40 1443 netmask 255.255.255.255 static (inside,outside) tcp xxx.xxx.249.197 1080 access-list Nat1 static (inside,outside) tcp xxx.xxx.249.198 1080 access-list Nat2 static (inside,outside) tcp xxx.xxx.249.198 2080 access-list Nat4 static (inside,outside) tcp xxx.xxx.249.197 2080 access-list Nat3 static (inside,outside) tcp xxx.xxx.249.199 1080 access-list Nat5 static (inside,outside) tcp xxx.xxx.249.199 2080 access-list Nat6 static (outside,inside) 192.168.1.50 xxx.xxx.249.200 netmask 255.255.255.255 static (inside,inside) xxx.xxx.249.197 192.168.1.50 netmask 255.255.255.255 nat (inside) 0 access-list inside_nat0_outbound nat (inside) 199 access-list Mail nat (inside) 1 0.0.0.0 0.0.0.0 I included other cli but changes the ip addresses. I am trying to allow my server behind the firewall to send http traffic to itself.  Currently blocked by rule 35&36 in the gui. ... View more

I do not understand your response.  Can you explain the effect of these rules? ... View more

Are you a cisco employee? What is it going to break to go backwards from 7.4.9c to 7.4.6? I am nervous about doing this becuase of other issues I have with this phone. ... View more

What does this mean? ( after this firmware the use of Bluetooth and video monitoring is no longer supported ). I purchased this headset after checking compatibility on the cisco site. What is going on??? ... View more

After making that change, the phone no longer works with my voice mail.  It does not recognize the buttons. My phone vendor (Aptela) sells this phone.  I did not purchase it from them.  They have received the configuration and see nothng wrong.  Is this phone defective, or is it just junk? I spent $300 for this phone.  I am not very happy that I can't make something so basic work. ... View more

I changed the parameter to "inband" and it works better. I doticed that if I pick up the hand set (instead of speaker or bluetooth) it works better.  Still not 100% reliable though. Is it likely that the "inband" parameter will cause other issues? It was set to AVT before, as is another SPA303 that is working. ... View more

having a similar issue.  Did you get a resolution? ... View more

I worked with my vendor (aptela).  They did a capture and see that the phone is sending the correct characters, but it is not recognizable by gotomeeting.  As I mentions, i also have problems with other voice response systems. It sounds to me like a timing thing.  Are there other settings that might affect how the key strokes are sent? FYI:  I turned off blue tooth to see if it made a difference.  It didn;t. ... View more

Both phones have the same value. Other ideas? ... View more

Hi Manish: I entered these commands, but it did not resolve my issue. I do not see where these commands affect the GUI. I might need to undo them if they cause a problem. I give up. The configuration of this device is just too complex. I am entering commands that make no sense to me. It is not possible for me to troubleshoot this environment. Thank you for your assistance anyway. ... View more