Cisco Firewall :: 5510 - Internet Goes Down And Cannot Browse
Feb 14, 2013
I have installed ASA 5510 to limit sessions of Users to 170. But as soon as i put it infront of network before router, Internet goes down and i cannot browse or something.
The network is simple, Cisco three layer model with users on Wired LAN/Wireless LAN using WLC. Approx 2500-3000 users.
I recently deployed this module on Cisco ASA 5520 (v8.2.5) at a client's place. I'm having problems. Even if there's 1 user, browsing Internet is super slow. If I were to bypass the CSC SSM (for 10 users) module by removing the "service-policy TEST interface inside" command, browsing Internet is very fast. Based on my troubleshooting, if I were to disable Web Filtering, Web Reputation and URL Blocking & Filtering, and leave all other services enabled, then the browsing is fast. how come I enable the 3 services stated above and browsing the Internet is slow, even for 1 LAN user. I don't have any thing configured under these 3 services. Just by enabling the services alone, it's already slow. It doesn't make sense for Cisco to sell such an expensive product and it can't even handle 1 user with no settings but services enabled.
I have some problem with the ASA 5510 ver 7.0(6). My manager wants to keep this as backup. tried lots of things but still users not able to access internet nor can i ping anywhere.For example when i ping 4.2.2.2 i dont get any reply.The runing config is below for ur ref :
I just got a PIX 506e from a friend that was not longer using it. I'm trying to get started with the configuration page. I've reset it to factory defaults, rebooted and connected up ethernet. I can ping the device at 192.168.1.1 and access it via console. I browse the site https://192.168.1.1/startup.html, get the invalid ssl certification, get a login prompt (user/pass) and as the document says I leave it blank. As soon as I hit ok it goes to the 404 error Page Not found.
Port forwarding done to a DMZ located server on the cisco ASA 5520. Now this host cannot browse but allowed outside to inside access is possible Is there anyway i can give this system to browse internet? may be through the natted IP ( 94.20.*.*)
I am working on a friends vista machine and I cannot browse the web internet is connected I can ping say 8.8.8.8 and get a reply but if I ping (url)it say its unreachable. I have reset winsock and the tcpip stack stopped and started the DNS service tried manually entering DNS servers and no luck.
I just installed a new ASA 5505 for an office with three internal subnets. The three networks can each get online fine and ping eachother, but cannot browse to shares on the two internal networks other than their own. How do I configure the ASA to allow all traffic between these three inside networks?
From home I would like to browse my intranet at work where I have a Linux box, which I will call "W", i.e. url...My router at home closes port 22 but maps port 2222 to port 22 on my server "S" which resolves to mydomain.org.
My main machine at home, "M", is where I do my work from home. I thought this might work: [code] On M I tell firefox that S:6666 is the proxy for all sites like url...
So far my browser on M cannot find the intranet web sites with this scheme.How do I make this work? What can I use to debug this
I am running windows XP on a computer that I use solely for my business' POS system - therefore not being able to connect to the internet is a problem as I cannot process credit cards. I have checked with the linksys (for router) and internet service provider - everything is working fine as you can see because I am posting from another computer. However the computer that is hardwired to the modem and router cannot access the internet. I get a "connecting" message then a quick "login failure" then a " internet explorer cannot display this page" message
We usually connect to a remote server through VPN connection. Nowadays we are unable to browse internet after we estabilish VPN connection. I searched many forums and site and got a temporary solution Go go properties of VPN connection - click on networking tab - properties of IPv4/ IPv6 - go to advanced - in ipsettings tab - uncheck "use default gateway on remote network"
After doing this Im able to browse internet but my concern is the external IP should be of the remote system and not my original IP so that I get access to my remote LAN network.Even I'm able to find a temporary solution for this. After doing this setting we need to connect VPN and disconnect it and go for same setting but you need to check "use default gateway on remote network". Now connect VPN and everything seem to work fine , I'm able browse internet and my IP remains of the remote network and everything is working fine till the VPN connection is disconnected.
I have no virus/malware (malwarebites) that i can find. All of the firewall's i know of are off and all antivirus software.I Have a desktop computer with Windows XP Pro. I have Cable internet and I am connected through a modem > router > computer.I will copy & paste (from flash drive) onto here the following commands as i have seen numerous requests for this information on other inquiry's that i have read.
Computer always says it is connected to the internet, but I can only browse sometimes? I can always talk on chat on skype and use spotify. Other programs, like League of Legends I can also use, if I was signed in while the internet was working BUT if I start a game while not being able to browse, the game will crash when I'm about to go in-game. Everyone else in my house can access the internet from same router.
My laptop power cord failed and replacing it is beyond my current budget so must get my old desktop up. I've got it connected but it won't surf the web. Says excellent connection.... But no connection seems evident if I try to go online.
I have an issues with a hp pavillion desktop. I just reinstalled vista home 32 bit and everything loaded just fine open IE and down at bottom left ip address is showing instead of verbal address. It displays internet explorer cannot display the webpage. ive tried diagnose connection problem and it tried to reset netowork adapter with no luck.Reinstalled network card, reset IE browser to default, started in safe mode with networking and still nothing.I pinged yahoo and got 4 recieved 4 sent. I have no errors in device manager. I called Isp provider and they said something is blocking from recieving, i need to take it in to have it fixed. i have 2 other computers on the same network wirelessly working fine, unplugged cable from hp destop and plugged it into other pc and cable is working just fine.
i'm having difficulties with my internet connection.. My internet is plugged in and it says it works. But I can't browse any websites, it's like i didn't have internet. I can play online games, i can go on steam and talk or play online and I could ping in cmd as well. I'm running window 7 64bit.
I have already trying to fix with :
1) reset tcp/ip with netsh thing
2) flush dns
3) uncheck proxy in internet explorer
4) run avira antivirus, malwarebyte, spybot, cccleaner, tuneup utilities
5) try to connect with mozilla, chrome, internet explorer but fail.
5) trying to connected in safe mode with networking but still fail. none of this solution work
Whenever I download from µTorrent, Steam, or Firefox, on any computer in the network, I can't access the internet through a browser.Skype, MSN, and Steam still work, however.I've randomized µTorrent's ports multiple times, but nothing's working. As well, I have tried disabling all firewalls on both systems, but with no luck.
I'm having difficulties with my internet connection.. My internet is plugged in and it says it works. But I can't browse any websites, it's like i didn't have internet. I can play online games, i can go on steam and talk or play online and I could ping in cmd as well. I'm running window 7 64bit.
I currently have 3 computers in my home: 2 PCs and 1 laptop and all three are wired with Ethernet cords. The PC's are not the problem the laptop is. Day before yesterday I was able to connect to the internet with the laptop now yesterday and unfortunately today I am having the same trouble. I spoke with my DSL provider and all is good on that end and the router (NetgearDGN2000) is working well because there is no problem with the laptops. The tech for my DSL provider said it sounded like it was an ip configuration prob. But since it's a third party product (no problem). LOL and I've been on hold for C.S. for netgear for quite a long time. I prefer getting my info this way because I can grasp the info a lot better and in the unlikely event I have this problem again.[CODE]
I have an hp laptop running on vista. When I connect my laptop wirelessly to the Thomson router it shows local and internet but I can't browse the internet! But when I connect the router to the laptop with the Ethernet cable everything works fine
My ASA 5510 IOS version 8.4.2 CSC IOS version is 6.6.1125,I configured ACLs and Class maps to forward all HTTP,HTTPS,SMTP,PoP3 and FTP taffic to CSC.Here my issue is my CSC not getting updating from the internet and some email sites like Webmail and Gmail are not taking forward after entering credintials. If i removed ACL belongs to the HTTPS , all are working fine( CSC updating well and all email sites are working.)
I implemented a ASA5510 with latest software version. I configured outside interface, default route, PAT to the outside interface. I am able to ping and telnet to the inside interface of the ASA.But internet is not working.Did i miss any configuration?i enabled icmp to outside,. i did a ping to the next hop from ASA. but it is not working.
I can't seem to get internet access working from the DMZ network through our ASA 5510. PCs on the DMZ can ping the ASA but can't get out to the internet.I will attach a (cleaned) configure.
We are in the process of getting two new connections pulled in that I would like to utilize in the following configuration.
DS3 - 45/45 I would like to use this circuit for all of our servers to NAT out of as well as our VPN tunnel to our remote site. It will be much more reliable than our cable line.
Cable Internet - 50/10 I would like to use this for all internet traffic that users generate. I would like to be able to fail over to the DS3 if this line goes down.
To get all traffic go out the cable line would take a dynamic NAT rule and a default route. How would I automate a failover to the DS3 with a backup route and dynamic NAT rule?
I understand that if the DS3 goes down it will take manual intervention to bring the tunnel back up and servers with static NAT will need reconfiguration.
I can get access to the internet from the ASA 5510 itself and that is confirmed via pings. However, anything behind the ASA does not have internet access, on any VLAN/sub-interface. I've attached my running-config.
the set-up is: a DSL modem in half bridge (it does all the PPPoE connection) passes our static IP (55.167.x.x) to the ASA's outside interface ... (the modem has an IP of 192.168.1.1, but not sure this matters)
then I have one inside interface on 192.168.43.1, which connects to a server and we have a working site-to-site VPN between this server and a client.. so I know most of it's set up right ... nothing else is on the 192.168.43.0/24 network.
the management interface is on 200.200.1.0/24 so it's out of the way and incidentally connected to a dedicated PC, which also has console access via the blue serial cable.
the last interface Main_Network is on the 192.168.0.0/24 network and it's this that I'm trying to get to work... at the moment I just have one Windows PC connected directly (does it need to go through a switch?) into the ASA for testing with a static IP (192.168.0.72), but I can't ping anything outside from the PC... only the ASA's interface (at 192.168.0.30).. I have the gateway on the PC set as 192.168.0.30 by the way.
The ASA can ping all the inside machines and anything I like outside.
Here's my config ... the static routes are there for when this replaces the current modem/router and the whole network plugs into the ASA.
ciscoasa(config)# show running-config : Saved : ASA Version 8.2(5) ! hostname ciscoasa
I lost the ability for my Web server (or any servers in the DMZ) to access the Internet. However, the Web server is still being used fine from the Internet. Here is my config
I have a HP G60-530US and i use Mozilla Firefox. My computer had froze up and i had to restart it. My wifi is working but it keeps sending me firefox cant find the server at... message. It said that the firewall or proxy could be doing it but i cant find a problem with it. My computer had just updated so i dont know if that could be the issue. My other computer is working just fine so i know its not the router. My computer has done with before but i cant remember how i fix it and if im not mistaken my computer had updated when it happen the last time, but im not 100% sure.
Basically, my internet claims to be connected (via wire to router, computer isn't wireless enabled.) but when I open a browser (I normally use Chrome but no browser is working) it came up with the Error 105 no matter what address I try to accessSo far, I have tried resetting my router and waiting, using cmd to reset winsock and resetlog, I've fiddled with some of the proxy settings and immediate downloads Of course, I'm not entirely certain what half of those things have done, but nothing seems to have worked properly. I've uninstalled all of the firewall/anti-virus programs I had installed, which hasn't changed anything either.I have had the 'connected but not connected' issue before since it happens quite often, but usually I disable it, restart the computer and just connect again, then it'll work - but this time it hasn't.
I noticed to have the information given from ipconfig/all, so I've copied out what I get from that below.* I've just noticed that the host name has changed to STACYSC, when it's not supposed to be. I think this is from me attempting to connect to a wireless connection before I realised it wasn't enabled - could this be an issue[CODE]
My flatmates and I recently got Sky broadband - their laptops connect just fine to the internet and they are able to use it without any problems. Mine also connects, but I can't do things like browse or use Skype, etc.When I go into Google Chrome, I'm told there is a DNS error that was unable to be resolved. Mozilla tells me that I have a problem with my server, and IE doesn't work either. Also, I am receiving very few packets. For every 2,000 or so packets that are sent, I only receive 2 or 6. When I click 'repair' I am told that my IP address cannot be renewed. The thing is, the internet works on my netbook at my mother's house, yet it doesn't work in my flat or other places like wifi spots.
I've tried so many things, such as clearing the DNS cache, releasing and renewing IP address, I've set the properties of the wireless connection to obtain DNS and IP automatically, I've tried pinging, I've turned off all my firewalls, I tried system restore, I've fiddled with certain keys in the registry, I even rebooted my entire hard disk last night and it still doesn't work! I'm really at my wit's end with this and I don't know what else to do. The problem is way beyond my comprehension now.
My pc (windows7) will say its connected.. It even says internet access.. But when I click in the Internet?THE WEB PAGE IS NOT AVAILABLE. It says the DNS lookup failed. But the thing is... all my friends bring their laptops over (Mac & Pc) and try work fine. Even my phone catches the wifi perfectly in my house. I started to think maybe it was the laptop but the laptop word great on wifi at my job, my friends house, and pretty much anywhere with wifi but my house. I have wifi through bright house and they came to my house one day but they ended up not doing anything because they can only make sure there device (router) works perfectly. Ok.. So I took the laptop to best buy's geek squad and the guy "reseted my network card" & told me it should e fine when I got home.. Nope. Didn't work. I have spent hours looking trough the Internet trying things that people recommended I do. (start, run, cmd) I've tried it all. It just won't work. I really need this laptop to work at home because I do a lot of work from the pc. I hope somebody on here could point me into the right direction before I give up & toss this laptop in the shed and be forced to purchase a new one.
whenever I try and access the internet from my laptop it keeps on loading...seriously like forever it never stops... I have tried a lot of things which actually worked but only for a limited amount of time. Lately I had been lucky to get my hands on some cmd commands which were abletil I restarted the laptop, I then performed the following commands every time I started the laptop: netsh winsock reset catalog, netsh int ipv(ip, ipv4 and ipv6) reset reset.log.I also tried ipconfig/flushdns which worked for like 5 seconds, they worked only for 1 week. I have 1 computer and 2 laptops, the computer can connect and browse my sisters laptop too but my one not. I was setting up both my and my sisters wifi, it took ages to get done once it worked for me once for my sister and then it stopped working for me and i got it running on my sister.[CODE]