access https sites from my PC? I cannot access these sites from IE 9 nor Firefox 6. I even disable firewall to try getting access to the secured websites but to no avail. But this problem recently cropped up when i upgraded my PC from XP to Windows 7.
View 11 Replieswhen my Linux VM is running!How's this for a mystery - last night I noticed that I could no longer access my gmail. Thought it might be down. This morning, I still couldn't access it. Thought I would try comcast, no joy either. Changed computers, no difference. Changed routers, no difference. Bought a new router and started plugging in network cables one at a time. My main machine first, everything works - http and https sites, a second computer, all good. The switch. Fine. Powerline. Still good. Then I plug in a Windows server running a Linux VM. Https sites on all the other machines stop working. Pause the Linux VM, restart router - https sites return to life. Went to Linux machine, re-enabled ipv6 (the only recent change on the Linux machine was to disable ipv6 since upon a reboot, Linux didn't have an ipv4 address). Restart Linux everything seems fine. A few hours go by, try to connect my wife's new laptop and at that moment wireless seems to stop. Restart router, wireless is back. But lo and behold, https is gone again. Unplug the machine that has the Linux VM, restart router, all is good.Ever see anything this weird?
View 3 Replies View RelatedWIth Chrome it does work although a bit slow. With IE as-well.Had the problem with FB as-well allthough that i could cancel with allowing it to connect.Gmail doesnt.Production Security Services and the certificates seem to cause problems.Searched the internet; tried a scan, checked the date, activataed the SSL and TLS in the browsercertificates, the server and organisations names.
View 4 Replies View RelatedI just put together a new computer. After putting it together I installed Windows 7 64-bit. My problem is that every "https" website I go to fails at its certificate validation. Every browser I use (Firefox 4, Chrome, IE9) warns me that the security certificate failed the validation. If I click "continue anyway" the browser shows a blank page. This happens for every https site. I have tried mail.live.com, mail.google.com, bankofamerica.com, etc. I can't even connect to windows update (which is really bad). The problem is limited to this computer. All my other computers (2 laptops with windows 7 32 bit) connect to websites using https just fine. My computer is freshly installed, but I scanned for spyware/viruses/trojans and came up empty.
View 1 Replies View RelatedUsing webvpn on a 2811 w/ adv ent 12.4(20)THTTP sites work fine (in the url-list)
But when we try to use an HTTPS site, clicking on that site just hangs forever. Debugs show the connection is making it, and the servers are getting the connections...
The destination servers are using self-signed certs, as well as the router. They are not requiring client certs.
I have a WRVS4400N I am able to block http sites such [URL] but everybody have access to [URL]
View 2 Replies View RelatedThis problem just started. I am unable to load certain https sites (for work). If i directly connect to ethernet, it works, so my isp isnt my problem. When i try to connect to the sites, it says "sending request" then times out. I have played around with the settings non stop and nothing has worked. I have a mac running 10.7.5.
View 3 Replies View RelatedMY ISP installed one router in my lab.for internet connectivity they mail me steps :connect your Laptop directly to gi0/3 port to check internet connectivity with public ip 1.1.1.x and Gateway 1.1.1.1 with subnet mask 255.255.255.240 after connection I surprised because I am able to access only google sites like gmail,google search etc. but I am able to ping/traceroute all sites.from browser I am able to access only google sites only.In Router no firewall no such access list.
View 2 Replies View RelatedI am going to hook my laptop directly up to my wireless router via ethernet. I will be showing them security, SSID, etc. My issue is when I put in my WAN and LAN settings. What exactly is the difference between a WAN address and a LAN address.I kept my Lan address that same as the router. 198.162.1.1.I create WAN addresses as 198.162.128.45 with subnet mask as 255.255.255.000 abut not sure what to put in for my gateway. Logic say 198.162.128. 1; however that doesn't work.I then configured my tcp/ip to reflect this. Although I can always access my router website, I cannot access any other web sites.
View 1 Replies View RelatedSo I had trouble connecting to some sites before like apple and such right? No big deal, just one site. Probably down. Then more and more.I got worried, then figured it was my ISP and went to neighbor to check. No. It wasn't. I ran home and checked my router, googled it before all my internet went down. I read something about UPNP being enabled and so after my internet was down, I went and checked, it was, disabled it.
View 1 Replies View RelatedIv tried about everything you can find when you google things about not being able to access a particular website but none work checking out all security settings, deleting all cache, disabling security, checking date and time, flushdns, use opendns, try other devices (not one device in my household can get to https pages on this one site), making sure root certificates are updated, bypassing router, unplugging internet and router to ''reset'', trouble shooting with isp, website, ssl issuer, other wildblue users, other website users, other tech forum, checking for virus and malware and I'm sure there's more that I can't recall at the moment. I am not the only user of this website with a problem and all us having a problem have satellite internet (different providers), however not everyone with my satellite internet (wildblue thru dishnetwork) has this problem as I have asked here...some do some don't Wildblue ''blocking'' a website's ssl? - WildBlueWorld.com Forums
I can go to the website toontown.com but I can not access any pages that are ''secure'' or https. Can't login and using satellite internet?
I have a 2911 which works perfectly except I cannot access it via HTTPS. HTTP and SSH both work. I've regenerated the RSA-key several times but to no avail.The box has a host- and domain-name configured.
View 8 Replies View RelatedFor some reason i can't get access anymore to the web interface of our ACS 5.3 appliance.Where i used to get a certificate warning first, and after that the ACS5 login screen, i now get totally no response anymore in my IE browser.
I can telnet to port 443 of the unit however. And i (fortunately) still have ssh access to the unit. So i did a reload (microsoft habits) but that did'nt solve anything.https access to other systems from the same browser is functioning fine
=================================
admin# sh ver
Cisco Application Deployment Engine OS Release: 1.2ADE-OS Build Version: 1.2.0.228ADE-OS System Architecture: i386
Copyright (c) 2005-2009 by Cisco Systems, Inc.All rights reserved.Hostname: <deleted>
Version information of installed applications---------------------------------------------
Cisco ACS VERSION INFORMATION-----------------------------Version : 5.3.0.40.8Internal Build ID : B.839Patches :5-3-0-40-55-3-0-40-8
=================================
I can't access my ad sites through my internet. I can access them through my phone internet and others are not having any problems going to them
View 3 Replies View RelatedOur office is running a DELL Poweredge server2 xeon processors16 GB memory5 RaiddrivesVM WARE with 3 virtual machinesOne of the VM's handles our DNS with is our main server second is an exchange server third is a sequal applicaioas of recent we have notice a few website sites we cant access (municipalities of which we access tax info) we need to visit on a regular basis. and it only seem to be just the 3 or 4 that are closest to us. Othe area communities we can access fine. All we get is a page cannont be displayed.The sites works outside our office or on our phones.[CODE]
View 5 Replies View RelatedI cannot access http sites unless I manually write the prefix https. The issue is mainly on Wordpress blog pages and I have to keep writing https if I want to access other blogger's page.For the time being I am using Chrome's extension "Https Enforcer" which slows down my browsing speed but eventually the sites open. I have to disable it if I have to use google images. I use windows 7, Chrome browser, Pocket Modem.
View 2 Replies View RelatedI installed the LMS as ova template on ESXi and be able to connect via SSH, but when I try to connect via http or https I got the following error.
ForbiddenYou don't have permission to access / on this server. Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.
We have an ASA5505 UL bundel, updated with this license "L-ASA5505-SEC-PL=" to enable traffic from DMZ to Inside. No NAT or rules deployed for that yet.
On the Inside we have Exchange 2007 in a single server installation. The public url for smtp, ActiveSync, OWA and Outlook Anywhere is mail.company.se. There is a static NAT for outside traffic to access above mentioned services on inside. Now, on DMZ there is the WLAN for guests to access the Internet. How ever, our Smart Phones with WLAN turned on, cannot sync to the Exchange Server on the Inside! The DMZ gets IP-addressen from ASA on DMZ Interface with external DNS configured. How can I configure the ASA to achieve the function of ActiveSync from DMZ to Inside with the public URL from the phones?
I have a closed network that is not connnected to the internet, just other sites that we want to communicate with. We have a cisco router connected to the outside interface on an ASA5505 and a cisco router connected to the inside interface on the same ASA5505. I have an inside interface that connects our management LAN, five separate DMZ interfaces with a separate LAN (VLAN) on each DMZ interface and the outside interface that connects to the other sites. Data is not allowed to mingle between the five DMZ's.
Alll connections to the other separate nodes are handled with the router on the external interface. IPSEC GRE tunnels have been established between all sites and BGP routing has been verified. Pings are good between inside, dmz and external interfaces and between the DMZ's and the other sites, to include hosts on our local networks and hosts at the remote sites. Inter and intra traffic is enabled.
When a remote site attempts an https connection, the initial ACK handshake makes it through the ASA5505, but the return SYN/ACK is being knocked down and I don't understand why (it is not because of ACL's, they are any any at this point).
Why the return SYN/ACK to the remote site isn't getting through the ASA5505 outbound. Will probably have the same issue with FTP, but right now, just trying to solve one problem at a time.
ASA5505 is in routed mode, not looking to NAT since the IP addresses in the DMZ need to be reached by their real IP address.
So, i have set up a working Anyconnect solution, (see attached picture)
Firewall is a 5585-x ssp20 running 8.4.3
Core is cat 6500
Anyconnect client version: 3.1.00495
Configured vpn with a tunneled default route to 172.19.16.1 (Core - cat6500) No split tunnel is configured, everything has to be tunneled and monitored by WCCP in Firewall. Authorization is by Certificate Only.
I can reach inside servers (for example 172.18.254.37) i can reach DMZ server (for example 192.168.138.36) i can surf the internet on regular HTTP (port 80)
but, i cannot surf the internet or DMZ servers using HTTPS (port 443) also, ftp does not work. i have tried to reach external ftp servers who are open to all.
both https and ftp works from the INSIDE network.
I have tried to change the port for Anyconnect, to 444 (for dtls as well) and i can see that all the vpn traffic is going over 444, so 443 should be undisturbed.
but this is not working.. could it be a certificate problem, or am i missing something? NAT/PAT?
This is my NAT configuration:
nat (DMZ,INSIDE) source dynamic NET-VPN-DMZ-PORTWISE-NATED-BOTK HOST-172.18.254.69 destination static NET-VPN-REMOTE NET-VPN-REMOTE
nat (DMZ,INSIDE) source static NET-DMZ NET-DMZ destination static NET-ALL-INSIDE
[Code].....
I am working in an environment with 6 4402 all running 6.0.119.4 code and WCS 6.0.196.0. I keep getting an alert from WCS that the controllers cannot be reached "Controller '10.x.x.x' is unreachable. - Controller Name: 'Name'"
Now when I go to access the WLC through HTTPS I have no access at all but controller still responds to ICMP, HTTP, Telnet, SSH. I know I should have HTTP and Telnet disabled but since HTTPS keeps failing I would have no way to get into the controller. Is this a known issue in the 6.0.199.4 code? should I consider upgrading? The only fix I have found to work is to disable HTTPS reboot controller enable HTTPS and reboot again.
I would like to know if there is a possibility to create 2 Remote access VPNs for 2 ASA situated in different sites and using only one PCF file.Is set up a tunnel between the 2 ASA the only way to reach the 2 destinations with the same PCF file?
View 6 Replies View RelatedI cannot access google sites or services in any browser, tried Chrome, IE and firefox.I'm running Windows XP SP3. I can ping Google without issue. My hosts file is clean and I checked in the registry to make sure that the hosts file is where it is supposed to be. I had trouble finding one that worked but I configured Chrome to use an external proxy and it seemed to work, abeit too slowly to really tell. I did manage to get a Nigerian google page up though.I've flushed the DNS and switched to the free google DNS.Looking around I've seen similar issues with people using Linksys routers. I am not using a Linksys router. I am currently using my android phone as a hotspot.I am running a Windows 7 laptop on the same network with no issues and booting the same host into Vista also works fine.
View 15 Replies View Relatedi have 2 rv042 with a vpn tunnel between them.the problem is that i can't access https over the VPN !if i telnet 192.168.10.1 443 through the VPN, it's not working either. if i telnet 192.168.10.1 443 in my 192.168.10.0 network it's working so it's reall the VPN tunnel the problem.
View 1 Replies View RelatedI can not access my Linksys E3000 router via https://192.168.1.1.Before this mishap, I was able to gain access to my Linksys E3000 router via http://192.168.1.1 and/or the Cisco Connect software application on Windows 7. Yesterday, I went into my router's administration page and disabled http, and enabled https. I then closed out all browsers, restarted them and entered https://192.168.1.1
After that, I learned quickly I made a huge mistake to make these changes. I simply can not access my router admin wired or wirelessly. Accessing the internet works great, but router admin page is a no go.Firefox and IE states, "There is a problem with this website's security certificate." and was unable to proceed.Firefox even gave me the option to accept a security exemption to proceed, but that failed.
I have also tried using the Cisco Connect utility, and that also failed. I have taken these steps and not been able to access my router's admin page.I don't want to take the last final resort to reset my router and re-enter my settings again. I know I saved the router's backup file somewhere, but can't find it.Is there another way for me to gain access via https with http disabled? All I want to do now is go back in and change it back to enable http access.
To improve the security of my 4200 v1 router, I turned on in the router configuration "Access via HTTPS" and after the reboot I could not access my router via the browser even when I click on the browser message to continue. What do I need to configure either in the router or my browser to use HTTPS?
View 9 Replies View RelatedWe have recently upgraded the software on our two WLC 4404 from software release 4.0.xxx to 4.2.xxx to 6.1.199.4 and lastly to version 7.0.98.0.
We could access the WLC's GUI's using https when it was on version 4.0.xxx. When we did the upgrades from version 4.2.xxx to 6.1.199.4 we couldn't access the Admin page through https anymore but only through normal http. We enabled https through the GUI and through the CLI and we did do the re-generation certificate , without any success. We then upgraded to version 7.0.98.0 and we still have the same result , cannot access Admin GUI through https.
I have a ace board(Acsm) in my switch 6509.I need provide access for clients over https, my scenario looks like this post [URL] .But, i have only one interface, and need to configure nat for inbound clients, to access the server with ip address of the interface vlan of my ace(if i set ace gateway in a rserver, the ssl termination works). The Topology is: Client(https) -> Ace(Https) -> Ace(http) -> rserver (http). Need to configuring this nat? I need that external clients arrive at the server with the ip of the same network as him, he did not right back the packet to the default gateway, but the origin of the same network as him, so that the communication function successfully, end order.
View 1 Replies View RelatedI was unable to access my ASA 5520 using HTTP/HTTPS even on the management interface. I had upgrade the ASA IOS to asa832-k8.bin and ASDM to asdm-634-53.bin. But, the issue still the same.
My browser show the error message as attach image.
PGA-Firewall-02# sh run: Saved:ASA Version 8.3(2)!hostname PGA-Firewall-02enable password 8Ry2YjIyt7RRXU24 encryptedpasswd 2KFQnbNIdI.2KYOU encryptednames!interface GigabitEthernet0/0 nameif public security-level 0 ip
[Code]....
I use the Service port connected to the managementVLAN to manage the WLCs. When configuring HA with AP SSO, I lost HTTPS connectivity to the WLC, telnet still works fine.I researched the deployment guide and it states:
- When AP SSO is enabled, there is no SNMP/GUI access on the service port for both the WLCs in the HA setup.Why is remote access disabled using GUI when using HA, and how can I keep management of my WLC using HTTPS and an address in the ManagementVLAN.
Configuring an asa 5505 with 8.42 software.I need to access an https server on the inside via the outside interface. have moved the http server enable to port 10443.Tried to make a "network object nat rule"
object network Vejrstation nat (any,outside) static interface service tcp https https object network Vejrstationnat (any,outside) static interface service tcp https https.
I am trying to block access to facebook and twitter on my router, to a certain range of ips, 192.168.1.8 - 254. I have been digging around and trying stuff but all I do seems to restrict everyone access to the internet.
View 5 Replies View RelatedOur secondary site accesses the internal intranet via a link, which is basically:
[URL] where externalip is the IP address of my router.
* This used to work fine before we migrated from ADSL (6mb up / 0.5mb down) to Fibre(70mb / 20mb) *
Internally, I access the same link, but via [URL] Internally it loads in 2 seconds, externally it is taking 68seconds(ish)..
I can't work it out, the fibre shouldave made things loads quicker but is infact very slow. I'm wondering if something network wise is going on.
The intranet is a php intranet sitting on apache, and using postgresql as the database. Other pages load fine, this specific index.php page does quite a lot of DB connections and so on, but as I say before, it worked fine before the migration.