is there any way to apply hostname or object network in the syntax? The command gives the option to use hostname or A.B.C.D but doesn't accept the hostname PIX1(config)# filter url except 0.0.0.0 0.0.0.0 ?configure mode commands/options: Hostname or A.B.C.D The address of foreign/external host which is destination for connections requiring filtering Can an FQDN be used as a foreign/external host?
View 3 Replies
I am able to access ASA via hostname but with IP address it does not work.Need to know what config i need to put so i am able to access it using IP by ssh and ASDM? ASA is 5520 version is 8
View 12 Replies View RelatedI am working on adding a mapping to our external address for our mail server - let's call it mail.example.com
I would like to be able to access mail.example.com internally for our user's smartphones - if they access our company WiFi they are not able to get mail using the mail.example.com as the server name in their phone setups. However, once they leave the office and use any other WiFi it works fine. Also, I am unable to ping that address from any internal device. I believe also this is the reason Exchange accounts do not work on our site to site VPN connections.
I have a ASA 5520 and work primarily in the ASDM 6.4 to do configurations in the main office and have 5510 in our site to site connections.
I have connected an ASA 5505 to an ADSL router that is able to assign the IP address and the also the DNS servers for the ISP for the outside interface. The ASA is loaded up with IOS "asa842-k8.bin"
I am using vpnclient with a hostname as oppose to an IP address to connect to a headend remote server. If I hardcode the DNS servers IPs in the "dns server-group DefaultDNS" I am able to resolve the hostname. If I then remove the IPs from the group and rely on the dhcp to assign them, when I try to resolve the name I have an error at the console "ERROR: % Invalid Hostname"
I have a cisco asa 5505 firewall. Is it possible to block secure websites in it like [URL]? I have already tried regular expression filtering but it filters only http traffic.
View 4 Replies View RelatedI've got a PIX running 7.2(4) with its outside interface on the Internet. The only thing this PIX is doing is acting as the endpoint for an IPSEC LAN-to-LAN tunnel with an Internet-connected ASA on another network.
I'd like to filter inbound Internet traffic to this PIX so that only the designated ASA can attempt to establish an IPSEC connection -- in other words, I want to prevent any other device on the Internet from even being able to attempt to establish an IPSEC connection to the PIX. As far as I know (and have seen), this can't be done with an access-list on the outside interface, since that access-list doesn't apply to traffic to the PIX itself.
We have Cisco ASA 5520 with csc ssm 10 (product ver. Trend Micro InterScan for Cisco CSC SSM 6.6.1125.0)in Web>Global settings> URL filtering > Rules > Communications and Search> Social Networking category is set to block during work time and allow during leisure time(see the attachement), but rule for this category won't work. I mean social networking sites are always remain allowed.
View 2 Replies View RelatedI am using an ASA 5510 firewall in routed mode.How can I filter incoming traffic by mac address on the AS 5510 ? I have already setup a static access rule for rdp users on the outside to access a terminal server on the inside.Now, i would like to further limit access from specific computers only.
View 7 Replies View RelatedDoes ASA 5500 has stateless filter to drop packet even when 3-way handshake is finished
For example,
1: 3-way handshake is done
2:client send data to server
3:I apply a statless filter to the incoming interface to drop the packet from the client
I have a problem with my ASA5505 after enabling botnet filter my ASA reboots.Also while booting it usualy takes around 30minutes of random cycles before loading the OS. It seems to be falling at the license check.To fix the boot I usualy unplug the ASA for about 15minutes and then it will boot up fine.
View 3 Replies View RelatedWe care currently using an ASA5505 as our firewall and redirecting web traffic to a S160 Iron port. Recently the web filter stopped working and the only way to get filtering again is to reset the redirection.
1. Is there any available log information to find out about the WCCP process and maybe way it stops?
2. Are there keep alive packets or anything of that natural between the ASA and Ironport?
Just wondering if it’s possible to add a time-range for certain url filter policies on a cisco 1941?
View 1 Replies View RelatedWhen I try to configure the Botnet Traffic filter with the commad "dynamic-filter use database" through the ASDM I get the following error message.
[ERROR] dynamic-filter use-database Dynamic Filter: New data file not terminated with newline
I am currently trying to enable WCCP between a Cisco ASA 5512 firewall and Barraccuda Webfilter 410 Vx applicance. The ASA firewall is running IOS version 8.6(1)2 and the Barracuda is funning firemware 6.0.0.013. Both the ASA and Barracuda are in the same network and can ping eachother. The ASA has several interfaces, outside, inside, data and dmz. The PCs and barracuda appliance are behind the data interface. ASA data IP 172.16.18.1 Barracuda IP 172.16.18.40 All PCs in the 172.16.18.0/24 subnet use the ASA as the default gateway and should have web requests redirected to the Barracuda.
Below are the respecive bits of my ASA config
interface GigabitEthernet0/0
description Management
speed 1000
[Code].....
I suspect my issue is that the ASA is generating a Router Identifier of 172.21.20.1 which is my inside network and the barracuda cannot communicate with it. how I can get this working ?
In Cisco ASA Firewall 5510 does the feature content filter come built in?
View 1 Replies View RelatedI seem to be experiencing a problem with content filtering on our 1941, if I add anymore patterns to the policy below the router crashes and requires a reboot, not sure why?
parameter-map type urlfpolicy trend cptrendparacatdeny0
max-request 5000
max-resp-pak 1000
[Code].....
In Cisco ASA Firewall 5510 does the feature content filter come built in?
View 3 Replies View RelatedHow to filter URL which includes "https", using the csc ssm module?
View 5 Replies View RelatedWe have a Cisco ASA 5520 and Web sense. I added a filter but it seems like it is still not allowing us to access a certain website from most of the machines however some machines with the same configuration work on the DMZ. Accessing website tells us:
"Firefox has detected that the server is redirecting the request for this address in a way that will never complete".
Filter I applied on the firewall:
filter url except 0.0.0.0 0.0.0.0 64.18.218.0 255.255.255.0 allow
filter https except 0.0.0.0 0.0.0.0 64.18.218.0 255.255.255.0 allow
Does ASA 5512-X have a category-based webfilter build-in?
View 1 Replies View RelatedDo you know if it is possible to filter TOIP flows between call server (Siemens technology) and phones ?Specialy, PIX is able to support dynamic ports opening?? Is there an ALG embeded?Is it required to upgrade PIX or not? is required a special licence??
View 1 Replies View RelatedUsing Cisco ASA5510 Security Plus (Post May 2010) with 8.2(1)
I was trying to limit the number of internet IP Address that can initiate Remote Access VPN connection to the firewall. I have plan to only allow internet IP Address from few ISPs for control.
However, blocking AHP, ESP, ISAKMP, NON500-ISAKMP, and IPSec Over TCP Port Assigned in the firewall outside interface doesn't work. But it works by putting the ACL in the router before the firewall. It seems that the firewall have a "hidden" process VPN first before user entered ACL (or explicit rule), similar to Checkpoint FW's implied rule. How to get around it?
How does a firewall block or filter traffic on a specific port or IP address?
View 1 Replies View RelatedI was having major issues with a 5505 (too long a discussion to go into here) so I formatted the disk and uploaded fresh binaries and recreated my configuration. I noticed the licenses were preserved. I also noticed there were several fsck records after the format that were reclaiming lost chains. I suspect the flash on this ASA is going bad, since everytime it boots it says "reading from flash ..!!" like it cannot even read flash successfully. When I purchased this one new, it also had several fsck records being brand new. I'm going to open a case on these flash issues/questions.
Anyway, after all of the above, the only thing that is not working is the botnet filter. [code]
I am having a setup with a 2851 router & websense url filtering server where I need to forward the traffic to websense server for all the internet requests. The http traffic is getting filtered properly, but the https traffic is not getting filtered. The two commands I ahev given for http & http are as follows: ip inspect name test http urlfilter ip inspect name test https.
View 9 Replies View RelatedI'm running into this issue on an ASA 5520 running version 8.2(2)9 and ASDM version 6.2(1).
I have an ACL denying traffic to a certain IP range and the logging level set to Debugging. The hit count is rising quite rapidly but when selecting "Show Log" the Real-Time Log Viewer opens with a value of 0x13d0ee2a in the "Filter By" field and no logs are ever shown.
Logging is enabled globally and Logging Filters on ASDM is set to Debugging as well.
how I can get the RTLV working?
I have Windows 7 x64 on my desktop, laptop, and HTPC. The past few months, everything worked fine. Today, I can ping my IP address but I cannot ping the host name on all 3.They also do not show anything in the network window, just the computer that I'm on.
View 1 Replies View RelatedOur Cisco team does inventory pulls with CNC and i was informed that this uses the hostname field currently the report pulls the IPadress, the discoveries that run on the LMS populates displayname field and puts the IP address in the hostname field. is there anyway to update this via query or process, i have too many devices to manually update this.
View 1 Replies View Relatedhow to get the Computer name of any computer on the Network by using its MAC Address. I am really in need of it
View 5 Replies View RelatedWe have one business application, accessed across GCC region by having a single entry with individual computer hosts file, ie123.123.155.116 myappl.mycompany.com and other than Bahrain, all countries are able to successfully resolve the hostname (application only works against hostname (Oracle EBS)) against this entry with the hosts file. Now, prior contacting the ISP in Bahrain (where internet is regulated due to the current political situations) we need to know whether anything could be done from our end to resolve this issue.
View 2 Replies View RelatedI have a small workgroup at home of about 4 or 5 computers. All the PC's, notebooks are running W7. I have one PC that I use as my "always on PC", with all my media and resources I use on it. The NetBIOS or computer name assigned to it is mediapc with a static IP of 192.168.254.150. All my other desktop PC's, excluding the notebooks, have a static IP also.The problem is more annoying then anything, and thus I only work on it intermittently. Today I decided to post after wasting much of another day attempting to resolve the issue.The problem is accessing my mediapc from any of my other computers while using the computer name, "mediapc". If I use the static IP assigned above, there is no problems. Everything works, RDP, Dameware, Telnet, SSH, Ping,Tracert, etc. If I use the computer name "mediapc" then it fails with an unreachable host error or similar. The reason it fails is because somewhere in my network or in the mediapc itself, it wants to resolve the "mediapc" name to an unknown IP of 192.168.254.47.
Now with this said, I can still share files and access the mediapc using the name in a UNC syntax, like //mediapc/data works fine or directly clicking on the mediapc share under Network works also. If I Ping mediapc from any other PC than itself, it fails with the 254.47 IP. If I try to use any remote connection software and use the name mediapc, it fails to connect.This is what I know and have tested:
1. Adding a host entry to all the client computers works but does not fix the root of the problem.
2. nslookup mediapc reports the wrong IP of 254.47
3. Remote connections as I mentioned above fail because the name is resolving to an invalid IP.
4. Pinging mediapc from itself, displays the correct IP of 254.150, although I have to use the -4 parameter.
5. Arp -a on all PCs report correct IP of 254.150 with the correct MAC address. (There is no 254.47 listed)
6. NBTstat -a mediapc reports correctly and shows the correct MAC address.
7. Network shares work correctly from and to the mediapc without issue. No access problems.
8. I have deleted all arp entries and flushed the dns with no change.
9. MS mentions to change order of the Bindings of the adapters, yet I only have one Local Area Connection.
This is Cisco Prime LMS 4.2.2 on Windows 2008 R2
As far as I understand it Fault Manager need to be able to do reverse lookup for ip adresses to show the correct name in the "device name" column. I have double and tripple checked and all devices that only is shown as an ip address do have a reverse in the dns used by the LMS server. The device is correctly registered and inventory have been run. If I hold the mouse pointer over the crosshair on the row of the offending device all info is shown including correct device name and fqdn.
The server is upgraded from 4.2.1 to 4.2.2 and we have the same problem before the upgrade.
i have a problem that i see the devices by ip not hostname in devices report and topology and i checked in device discovery to appear by hostname
View 2 Replies View Related
