Ths only hapeens at one location. All the other locations are working the difference is this location goes through the firewall. If I bypass the firewall at this location it works.
View 1 RepliesI have an unusual issue, for which I can find nothing on the net similar.
Setup:
ASA5505 = > CISCO3524 => Windows 2012 server
ASA is internet edge with ACL / NAT implemented.
We are wanting to implement inbound NATs for this server - 3389. We have many other servers on the internal side of this ASA that we are NATing to. Creating NATs using the same outside IP to another server is fine, no issues. This other test server resides on the same VLAN as the windows 2012 server. All IPv6 is turned off on the W2012 server, and it can web-browse out via the ASA as well. No matter what I do, however I cannot get iinbound NAT, on ANY port to this server working. Internally from another server to this server on any port is fine, i.e. we can RDP to this server without issue, so we know this works - the firewall on this server is turned off too. This is our ONLY w2012 server on the internal side. When we run a wireshark on the server whilst testing the NAT there is no traffic, so its getting blocked somewhere.
The config of the ASA is fairly big to to santize it and remove all customer reference would take a while to make display of this secure difficult.
internet connection ok but get website found waiting for reply (vista)
View 1 Replies View RelatedRegion : Canada
Model : TL-WDR4300
Hardware Version : V1
Firmware Version : 3.13.23 Build 120810 Rel.44064n
ISP : Bell Canada
We have a WDR4300 router that works well about 98% of the time. We have a static IP address from our ISP configured through PPPoE in the router and are hosting our own email and web server at local IP 192.168.1.200 behind the router. Port forwarding is enabled and working beautifully.
At some times throughout the day, any computer behind the router on our local network is unable to browse to our own website by our domain name (e.g. www.xyz.com) nor by the static IP it is attached to. We also get e-mail errors with mail client configured to use the domain name or the static IP it is attached to as the outgoing mail server. When this happens, I am still able to browse any other site on the internet without problem... just not our own. Also, I have verified that while this is happening (internal computers can access the internet but not our own website):
1) I can browse to our website just fine from a computer outside of our network (e.g. a proxy or a computer controlled remotely from my home)
2) a computer from within the office that cannot reach our website using the domain name or the static IP it is attached to can still reach the website by browsing to the local IP address of the web server (192.168.1.200)
3) the problem seems to resolve itself sometime within 45 minutes of noticing it is occurring if we do nothing. We can make the problem resolve itself sooner by restarting the router.
I have the impression that this problem MIGHT start occurring when users are downloading files from our website. Of course, if this is the case, we cannot simply restart the router to fix the problem because then we are cutting off their download.
This is what I have as a setup:BT Home Hub wifi routerPC with Windows 7 Home premium connected via ethernetMacbook Pro with OSX10.6 connected via wifiIt feels like i've tried everything to get this working. As far as I can see the settings are all ok but I've noticed that I can't ping the PC from the mac although I can ping with success the other way around tried traceroute from the macbook and it gives me this so it is able to see it somehow...Code:traceroute to 192.168.1.66 (192.168.1.66), 64 hops max, 52 byte packets 1 alistair-pc.home (192.168.1.66) 1.724 ms * 1.151 msNot sure where to go from here. I think discovering that ping is failing is a good start to diagnose.
View 19 Replies View RelatedExcuse my ignorance but, is there an easy way to add the camera image's to a website Is this a process that utilizes FTP - or
I do have some experience creating websites using MS Front Page.
If I am not able to start remote desktop services on windows 7 machine, will machine can be accessible by RDP?
View 1 Replies View RelatedWhenever I access a file through HTTP, it seems to require that I completely load the file before it will display.
1) For large images, this will result in the whole thing taking some time to load before displaying in its entirety, unlike the usual progressive rendering.
2) For file downloads, this will result in the file being downloaded only after being cached, appearing only when the whole file has finished downloading, unlike the usual process where it can be seen as a progress bar in the browser's download window (for some reason, FTP downloading seems to work normally)
3) For internet streaming video, this means the video will not display until the whole video has been buffered (i.e. will not play until fully loaded)
1) I am on a home network. Other computers (including my old one) do not exhibit similar problems
2) Using Firefox 9.01
3) Win 7 SP1
4) Realtek PCIe GBE controller
I have a strange error on my home network that I cannot find a solution to.I have an Huawei SmartAX MT882 from TalkTalk acting as a modem connected to a D-Link DSL-G624T acting as a router/switch. Connected to the D-Link I have a Windows 7 Pro machine (64-bit, SP1) and an XP (home i think) machine (sp 2 i think).The SmartAX modem is set up to perform DHCP and DNS relaying and the D-Link has DHCP turned off and DNS relay turned off.The Win7 machine can access the network, get an IP address and access the internet without problems, regardless as to the status of the XP machine.The XP machine can access the network, get an IP address and access the internet with no problems ONLY of the win7 is powered up. When the win7 machine is off, the XP machine seems to drop about 25% of the ping packets between it and the D-Link router and has no internet access (because of this i assume). [code]
View 8 Replies View RelatedNew Win-7 machine set up. I used the printer set-up wizard to install a networked printer in the new machine with absolutely no problem. Proved it would print from that machine.Now, I get a call informing me that her old XP machine, which had been printing to the network printer with no problems, will no longer print.Documents go into the print queue, but they don't get printed.No error messages show up.I did some messing around via remote access, and finally removed the printer with the intention of reinstalling it.Scanning for network printers turned up several redundant instances of the same printer with different names. Some are identified as "invalid" some a "access denied". Bottom line. I can't get any of the selections to install.On the Win-7 machine I did find a window that indicated that the printer is designated as being shared, but I didn't explicitly set it for sharing when I installed it. Also, I somehow got to a window that told me that for printers that were to be shared with other versions of windows I could optionally install drivers to support such machines. Didn't have the driver disk handy and took the window down. Now I can't even find it again.I need sorting this all out.Part of the problem is that out there in "network land" there are redundant remnants of previous installations that are being remembered inappropriately.
View 11 Replies View RelatedI have a normal setup of ASA5505 (without security license) connected behind an internet router. From the ASA5505 console I can ping the Internet. However, users behind the Firewall on the internal LAN, cannot ping the Internet even though NATing is configured. The users can ping the Inside interface of the Firewall so there is no internal reachability problem. In addition, I noticed that the NAT inside access list is not having any hit counts at all when users are trying to reach the internet.
When i replace the ASA5505 with a router with NAT overload configuration on it, the setup works normally and users are able to browse the internet.
The ASA5505 configuration is shown below.
hostname Firewall
interface Ethernet0/0
description Connected To Internet Router
switchport access vlan 10
[Code].....
Internet ISP -> Juniper SRX 210 Ge-0/0/0
Juniper fe0/0/2 -> Cisco ASA 5505
Cisco ASA 5505 - >Inernal LAN switch.
1. Internet is connected to Juniper Ge0/0/0 via /30 IP.
2. Juniper fe0/0/2 port is configured as inet port and configured the Internal public LAN pool provided by the ISP. And this port is directly connected to Cisco ASA 5505 E0/0. Its a /28 pool IP address. This interface is configured as outside and security level set to 0.
From Juniper SRX, am able to ping public Internet IPs (8.8.8.8).
Issue:
1. From ASA am unable to ping public ip configured on Juniper G0/0/0 port.(/30)
2. From ASA no other Public internet IP is pinging.
Troubleshooting Done so far.
1, Configured icmp inspection on ASA.
2. Used the packet tracer in ASA, it shows the packet is flowing outside without a drop.
3. Allowed all services in untrust zone in bound traffic in Juniper SRX.
4. Viewed the logs when I was trying the ping 8.8.8.8 in ASA. It says "Tear down ICMP connection for faddrr **** gaddr **
I have created a virtual server that hosts a ticketing website on it, locally i can access the website when i input my private ip .
Now i want to make it accessible to the agents outside my company , i have change my private ip to a public one, but the problem is still there,i cant connect . i disabled the firewall , just so i would be sure its aint a F.W problem and still , not working .
Recently, I have bought an ASA 5505 firewall which I have tried to connect to my ADSL router (Modem).It is now more than a week that I am trying to get internet connection through the firewall but I still can't succeed. I have tried many advices I get from this community but I still don't know what is wrong with my ASA Firewall configuration. From inside I am able to ping the inside and outside interface with a great success. and from my laptop which is connected to the firewall, I am able to ping the both interfaces (inside and outside) but still I can't access the internet.
As I don't have a static IP address from my ISP, I have configured the outside interface to pick up the ip address dynamically. Most of the time, the outside interface get the 192.168.1.2 ip address. [code]
I've been struggling with gaining access to the inter through our Comcast business gateway. We have had Comcast configure the device fro true static IP subnetting. Turned of local DHCP on the device etc. Here is my config.
ASA Version 9.1(1)
!
hostname TOCN-EX-01A-C5505-GW
xlate per-session deny tcp any4 any4
xlate per-session deny tcp any4 any6
xlate per-session deny tcp any6 any4
[code]....
Running ASA 5505
ASA Version: asa844-1-k8.bin
ASDM: Cisco ASDM 6.2(1)
I updated my ASA with version asa844-1-k8.bin.
However, whenever I try and run the ASDM client, I get the following error:
"Your ASA image has a version number 8.4(4)1 which is not supported by ASDM 6.2(1)."
How do I get the latest version installed on my Mac desktop? I know that I can connect via the web interface and run the ASDM client, but the same error persists. I have the asdm-649-103.bin file, but cannot connect to the ASA to install (I don't recall ever setting up SSH).
I've been having trouble viewing some Tinypic images. In the top of the browsers it always shows 1x1, and I see nothing at all.
View 2 Replies View RelatedI have a network problem. My windows 7 machine is not detecting win xp machine whereas win xp machine is detecting win 7 machine. They are in the same workgroup named Home. And the networking system is set to work. I have left the homegroup I was previously in. I enabled file sharing for devices that use 40 bit and 50 bit encryption. On XP I have enabled NetBios over TCP/IP. File sharing is enabled on both computers. I think it's something obvious as both instalations on different computers are really fresh and both windows haven't been tampered with.
View 12 Replies View RelatedI have a client ASA5505 generating this level 3 log message:
3 Mar 08 2011
19:48:34
IKE Initiator unable to find policy: Intf outside, Src: 192.168.0.2, Dst: 192.168.1.3
All the site-to-site tunnels on this ASA are up, so I don't know the meaning and signifcance of this log message or how to address it.
I have an ASA5505 running ver 8.0(2). I have configured the ssh timeout, ssh host commands and did the crypt o key gen. I am unable to access the device from the host I am allowing. Is there like ca save all command required? I am trying to use the default pix and telnet password. Do those still work?
View 3 Replies View RelatedUp until a few weeks ago I was playing the beta version of the pokemon trading card game online [url]... but then for no apparent reason I could not load the webpage & every time I tried I got the same "The connection has timed out" "The server at Pok�mon Trading Card Game Online is taking too long to respond." page. I tried 3 different browsers & I tried unplugging my modem & leaving it off all night to reset it but nothing seems to work. I thought maybe the website was down but then I was able to log in at the library so I thought maybe I was banned & they blocked my IP address so I downloaded a program that hides my IP address & I was able to load the site but not play the game. Just today tho I took my laptop to school & got on wifi & played it with no problem without even using the hide my IP program. So I am absolutely stumped! This is the only web page my computer will not load & I really want to play the game again.
View 1 Replies View RelatedI'm trying to get on a website (florida virtual school), and it's just not loading,it says oops! google chrome can not find flvs.net, my other friends can login and everything and i can go on other site, except the one i've also tryed firefox
View 1 Replies View RelatedI have the exact same problem with a site called www.psychologytoday.com. It seems to be working for the whole wide world - but i am not able to access it at all.
[code]....
WDS allows you to capture and deploy images on a network to client pcs. I Was wondering how many images wds allows you to capture and deploy and if there were any work a-rounds that would allow you to deploy more.
View 1 Replies View RelatedI'm able to build my tunnel but unable to RDP nor ICMP back to the internal network.
VPN Client IP: 192.168.200.200
INTERNAL IP: 172.17.130.200
my configuration is below:
HOME-ASAFW02(config)# wr t: Saved:ASA Version 8.4(4)!hostname HOME-ASAFW02domain-name hsd1.nj.comcast.netenable password ViPq56cvd3SGvB08 encryptedpasswd 8bcozHCAwCqA5BmN encryptednames!interface Ethernet0/0description OUTSIDE-Connectionswitchport access vlan 2switchport protected!interface Ethernet0/1description INSIDE-Connectionswitchport protectedspeed 100duplex full!interface Ethernet0/2description WiFi-LinkSYSswitchport access vlan 3switchport protected!interface Ethernet0/3shutdown!interface Ethernet0/4shutdown!interface Ethernet0/5shutdown!interface Ethernet0/6shutdown!interface Ethernet0/7shutdown!interface Vlan1description INTERNAL-Networknameif insidesecurity-level 100ip address 172.17.130.129 255.255.255.128!interface Vlan2description OUTSIDE-Link-to-ISPnameif
[code]....
all of a sudden my browser wont let me load this one certain site (Pwctoday.com). I think my internet is blocking it because i cant even go on my phone that is connected to my wifi. Also i have tried other browsers. Still doesn't workPS: I go on this website almost everyday. And i verified the site is working on my friends computer. So maybe my router is blocking it??
View 5 Replies View Relatedthe hotmail website does not load
View 1 Replies View RelatedWe have a CSS 11503 with the following partial config [code] it is clear that the server at 10.10.10.222 is active. What we cannot understand is why web site is inaccessible thru load balancer using http://10.10.10.1.
View 2 Replies View RelatedI have configured a router WRV210 and I left it enabled in order to access it remotely, but I can not connect to it. I have checked the settings and everything is fine, but if I try to access it from anywhere in the website does not load, either IE or Firefox or Chrome.
View 7 Replies View Relatedwhat is the best open source website load testing tool?
View 3 Replies View RelatedHaving being able to get a basic Ipsec VPN (with userid/password) connection to work between my Cisco ASA5505 and iPad over the Internet, I now am trying to introduce a digital certificate in the authentication VPN mechanism. However, I am getting an "Error processing payload: Payload ID: 1" , as seen on the Real time log viewer of my ASDM 6.2.This is what I did on the 5505 ASA to create a digital certificate:-
1) go to Configuration -> Remote Access VPN -> Network (Client) Access -> IPsec Connection Profiles and using the DefaultRAGroup profile I exported the Identity certificate (previously created) as PKCS12 with an appropriate passphrase/password.
2) I then created a new connection profile on the iPad using the CISCO ASA exported identity certificate. And unfortunately the connection fails, with the above message.
I would like to know if I am on the right track thinking I can use the CISCO identity certificate on the Client computer. The identity certificate is RSA 1024 bits and is self enrolled.I have not ebabled the CA Server in the Local Certificate Authority of the ASA 5505, I wonder if I have to.
I'm trying to share files on our 2 computers (1 vista 1 XP). I can access the XP machine through Vista but not the Vista machine through XP. We have a common LAN modem, a TeleWell-something with 4 LAN ports in te back.I have put the netsetup.exe in a flash drive and run it on Vista,no results,gives me an error. I have succesfully transferred one file (and could do more) from XP to Vista but not other way around.
View 3 Replies View RelatedI have an XP machine that i am not access websites from. the machine is hardwired into a router, the other computers connected to the router(wifi) are able to get access websites without issue.here are the steps i have taken and the things i know so far.im pulling a valid ip address, with correct dns/gateway all that good stuff
able to ping other machines on the network, pings the router, and able to ping google.com(so i know there is connection between me and the internet, and that dns is working)
installed firefox to see if it was a problem with IE, no go.took a look at the active process and looked up anything that wasnt familiar, that seems to be good.virus scan with avast came up clean, avast is able to connect to its database and pull the most current virus defs.
there isnt a firewall, the only security measures on the computer is avast.