Cisco Firewall :: ASA5510 / Accessing Exchange Server From DMZ?

Aug 16, 2011

We have a ASA5510 with a webserver in the DMZ network We now want this web server to be able to access the Exchange server in the Inside network I researched this and it seemed straight forward according the the Cisco document below:

I'm looking to do this with smtp so I added these lines to the config:
static (inside,DMZ) netmask
access-list dmz extended permit tcp host host eq smtp
The configuration line:access-group DMZ in interface DMZ Already existed in the configuration so didn't need to be re-entered.

ASA Version 8.0(4)
hostname xxxx
enable password xxxxxxxxxxxx encrypted
passwd xxxxxxxxxxxxxx encrypted


View 28 Replies


Cisco Firewall :: ASA5510 - Outlook Clients Disconnect From Public Exchange?

Apr 4, 2011

We have a setup where clients on the internal network send/receive their emails through Microsoft Outlook client, while the Exchange server is hosted on the internet, outside the organization.The clients are connected to a Cisco switch, behind an ASA5510 Firewall. The Firewall is connected to an internet router, with double NAT (On the ASA and Router).

the outlook clients disconnect from the Exchange server, sometimes for hours, and then reconnect again. During these disconnections, the same client PCs are able to browse the internet normally. There are no restrictions for the traffic going from the inside to the outside. During the disconnections, if we try to connect using a public IP bypassing the ASA & router,.

View 1 Replies View Related

Cisco Firewall :: Securely Access Exchange Server 2007 Through ASA 5510?

Dec 27, 2011

Is there any way to access a MS Exchange Server 2007 on Windows server 2008 through an ASA 5510 running 8.4 with a full MS Outlook client (not using OWA - web browser)?  OWA is currently working fine but I was wondering if access via the full Outlook client is possible and more it opening up too many ports on my 5510? 

View 1 Replies View Related

Cisco Firewall :: ASA 5505 - HTTPS Traffic Through DMZ Interface To Internal Exchange Server?

Apr 23, 2012

I have an ASA 5505 with the base license,When I setup the DMZ interface I had to add the deny access to the inside VLAN.  The DMZ works fine with WiFi on it, but user's iPhones can't get email unless they turn WiFi off.Is there a simple way to allow HTTPS traffic through the DMZ interface to our internal Exchange server which is NAT'd on the 5505's external IP?

View 3 Replies View Related

Cisco Firewall :: ASA551 - Not Accessing Server In DMZ From Outside

Aug 6, 2011

I get stuck in a problem,What can be the reason for not working my configuration or any other reason that can be .


View 4 Replies View Related

Cisco Firewall :: ASA 5510 - Accessing Web Server From Another One Within DMZ?

Nov 19, 2012

Is this possible and if so what commands do i need to configure on my ASA 5510 for it to work.I have two web server within my DMZ and i want to access the outside url of on on the web server from the other. Currently i can access the internet from both webserver server but not the url form either webservers.
E.g. config
webserver 1 ---> public ip---> dmz ip
webserver 2 ---> public ip---> dmz ip

View 2 Replies View Related

Cisco Firewall :: ASA Version 8.2 (5) / Web Server Not Accessing Internet?

Mar 14, 2013

active# sh running-config
: Saved
ASA Version 8.2(5)
hostname active
enable password 2KFQnbNIdI.2KYOU encrypted
passwd 2KFQnbNIdI.2KYOU encrypted


View 7 Replies View Related

Cisco Firewall :: ASA 8.0(5) / Block Specific Url From Accessing Server In Dmz?

May 4, 2011

I have Cisco ASA 8.0(5) and I need to block specific url to acees my https server in dmz ?I read about websence technology, but I think it's not free right? Also I read abotu policy inspection map's but in my case is HTTPS not http ..

View 1 Replies View Related

Cisco Firewall :: Can Configure ASA5510 As DHCP Server For LAN

Oct 13, 2011

I am using a fiber optic connection. I want to connect it directly to ASA5510. A WLC2504 will be connected to ASA and one Aironet AP will be deployed at first. (At this moment I am not using any Windows server but in near future I will need to deploy Windows Server 2003 in my corporate network) My questions are:
Can I configure ASA as DHCP server for my LAN?

Can I configure WLC as DHCP server for my LAN?

If we can configure both then what is the best practice from above two options? (I am new to Cisco stuff and first time user)

View 1 Replies View Related

DNS For Exchange Server?

Apr 13, 2013

I am new to Exchange Server 2007 . I want to know that in order to implement Exchange Server do I need to register Domain name like [url]... ? OR A FQDN of Active Directory can work.Is it compulsory to register domain ?

View 3 Replies View Related

Cisco Firewall :: Distant Mail Server Not Working On ASA5510

Jun 15, 2011

My mail server is not in my network, it's over internet elsewhere.After installing the ASA 5510, i can not get my mails any more.

View 7 Replies View Related

Cisco VPN :: ASA5510 - Accessing Anyconnect Via Other Local Interface

Dec 2, 2012

I have a scenario where there is an ASA5510 configured as follows:
Interface0 = Outside
Interface1 = LAN
Interface2 = DMZ
Interface3 = unused 
Running ASA version 8.2[1]
All network operations are fine, as are the IPSEC tunnels to other branch offices, and the incoming SSL VPN accessed via the IP address assigned to the external adapter.
My problem is that I have a device on the DMZ that needs to access the AnyConnect service hosted on the external adapter so that it can access LAN resources.  When I try accessing it, I see the following errors appearing in the debug log:
3Dec 03 201212:10:50710003[DMZ client address]51031[AnyConnect ExternalAddress]443TCP access denied by ACL from [DMZ client address]/51031 to DMZ:[AnyConnect ExternalAddress]/443 If you look closely, it suggests an ACL issue from the DMZ client to the external AnyConnect IP address BUT it suggests the Anyconnect IP address is on the DMZ interface.

View 1 Replies View Related

Trace Port Used By Exchange Server?

Mar 3, 2012

We use microsoft exchange for outlook. I want to know which ports are being used by our exchange server to receive and send emails. Is it possible to check that?

View 1 Replies View Related

Add Static Route For New Exchange Server?

Sep 11, 2012

Add static route for new exchange server?

View 1 Replies View Related

Protocols / Routing :: Two Domains In One Exchange Server?

Aug 28, 2012

Currently, my company runs a DC and exchange server in the building. It is also hosting our website with IIS7. All AD users currently have email addresses.We have just started an off shoot company and would like to setup emails in exchange so that we can automatically assign and manage emails on the same exchange server. so that each user hasWhat is the best way to do this?At the moment, - company is hosted outside with someone else. Is there a way that he can direct the mail to us so that he hosts the website but we host the email server?

View 1 Replies View Related

Cisco :: Why ESMTP Corrupts Emails So Badly From Exchange Server

Mar 18, 2011

since upgrading to 8.4(1) on our ASA 5520 I've had nothing but issues with our email server not being able to send out emails (timeouts,corruption, etc) and tried everything and then it dawned on me to turn off ESMTP inspection on the ASA's.Since I've down that our Exchange server SMTP works perfectly again.Why is it that ESMTP corrupts emails so badly from exchange server? (ours is a 2010 sp1)does anyone actually use ESMTP inspection at all?

View 3 Replies View Related

Cisco Routers :: Exchange Server - Port Forwarding On 2811?

Sep 18, 2011

Basically the problem that I have is that I have a new Exchange server sitting on IP address and on the router I have this NAT enabled
ip nat inside source static tcp 110 110 extendable ip nat inside source static tcp 25 25 extendable
The Exchange can receieve emails but it will not send them. It cannot make connection to any of the smart hosts on port 25 or can't even send mail using DNS. When I run telnet 25 it will not connect but if I run that from the router then it connects fine.

View 1 Replies View Related

Cisco WAN :: Inbound SMTP To Our Exchange Server Through 1841 Rejected

Jan 10, 2011

I am deploying a Cisco 1841 in place of our basic DSL router.I have an ADSL WIC and FA0/0 connected to our LAN.LAN IP ADDRESS range is 192.168.1. 0/ 24 I have dynamic and static NAT configured.  At this point although I have ACL's configured I have NOT implemented them as yet for the following reason.  I am unable to recieve inbound SMTP traffic - now  know my MX records are correct as this all owrks happily on our basic DSL router.  I can send external emails no problem and all internal email works fine. [code] I am in the process of defaulting the router and programming the barbones to get the link working and see if inbound SMTP works then start building the blocks again.

View 4 Replies View Related

Cisco Application :: Importing SSL Certificate From MS Exchange Server To ACE 4710?

Nov 16, 2011

My customer has SSL certificate already installed on microsoft exchnage 2010 servers and now wanted to import that certificate to cisco ACE4710.
How to trace the exact procedure to import the SSL Cert to ACE from microsoft exchange server and how about the KEY, from where I should get the KEY to cross verify for SSL Cert?

View 2 Replies View Related

Cisco Wireless :: RV220W / Unable To Connect To Exchange Server With IPhone

Aug 21, 2011

I just recently installed a RV220W at my office and (almost) everything works fine. I have noticed that when my iPhone is connected to the RV220 wi-fi network, I get the message "The connection to the server failed" when checking my email. If I disable the wireless on my iPhone, it connects up to the exchange server perfectly fine so it must be a setting with the wireless somewhere but I cannot find it anywhere.....

View 1 Replies View Related

D-Link DIR-615 :: Laptop Setup To Connect To Exchange Server For Email

Apr 12, 2009

I'm hosting my email on an Exchange Server 2003 box and have my laptop (Vista Ultimate 32 bit) setup to connect to the exchange server for my email. This works fine through a LinkSys RV042 in one location and a LinkSys WRT54GC in another, but fails through the DIR-615 B2 (2.24 firmware) at home. I'm guessing it's blocking something needed for the MAPI connection.

View 2 Replies View Related

Cisco Security :: Securely Access Exchange Server 2007 Through ASA 5510 Using Outlook

Dec 26, 2011

Is there any way to access a MS Exchange Server 2007 on Windows server 2008 through an ASA 5510 running 8.4 with a full MS Outlook client (not using OWA - web browser)?  OWA is currently working fine but I was wondering if access via the full Outlook client is possible and more it opening up too many ports on my 5510? 

View 2 Replies View Related

Linksys Wireless Router :: Connect Exchange Server Via Wifi And Ea6500?

Dec 30, 2012

Since I have installed my new router, a Linksys EA6500, I have many problems to connect to my Exchange Server, which is located in my house, via Wifi. I tried to synchronize my Iphone and my Samsung tablet but it won't work. Most of the times I get the message that the Exchange server cannot be connected. When I turn off my Wifi en connect via my mobile provider I have no problems. When I am on a third party wifi I also can connect my server. Seems my own wifi causes lots of problems.

View 6 Replies View Related

Cisco Firewall :: SSH Key Exchange DH Group 14?

May 29, 2013

I am trying to issue command "ssh key-exchange group dhgroup14" on several of my ASA firewalls.  The key-exchange command is failing on 3 of 4 ASA firewalls.  According to Cisco documentation, this command was introducted in 8.4.  My ASA's are running version,, and 9.1.2.  The command is available only with 9.1.2.
Example from one my ASA.
lbjinetfw# show version | in Version
Cisco Adaptive Security Appliance Software Version 8.6(1)10
Device Manager Version 7.1(2)
Baseboard Management Controller (revision 0x1) Firmware Version: 2.4
lbjinetfw# config t
lbjinetfw(config)# ssh


View 3 Replies View Related

Cisco Firewall :: Microsoft Exchange With NLB And PAT On Asa 5510

Nov 7, 2012

i have exchange with NLB cluster.
i want to PAT the cluster ip to access email from outside. i know i can add the static arp entry for multicast cluster ip.
my question is i can add static nat command to that same cluster ip for port 25 and 443 like normal way like we do for normal PAT?

View 2 Replies View Related

Cisco Firewall :: ASA Version 8.6.1 NAT To Exchange 2010 Cluster?

Feb 26, 2013

We have the following setup on our Cisco ASA version 8.6.1 One to one NAT rule from outside to our Exchange 2010 cluster IP address (DAG group). This is working fine for clients on the internet accessing their emails via Exchange using their phones. The ASA has the MAC address of the active node from the cluster but when the cluster failover it cache the IP address and are not updating the new MAC when the cluster failover. So users from the outside are unable to connect to the new node from outside the ASA as the MAC address from the passive node is in the MAC table. The MAC address on all the switches update within 2 seconds on the internal network and users don't notice any outage.

View 4 Replies View Related

Cisco Firewall :: Exchange Direct Push / ASA 5540 / Barracuda?

Jun 15, 2011

I have the following scenario.
                 [CISCO ASA 5540]
                             + ---------------------------------------------+
                      (                              (
                    [BARRACUDA]                         [Exchange SRV]
 Mail Domain:   (
Ok so the mail flows to the Barracuda using a static 1:1 NAT configuration and then gets delivered from the Barracuda to the Exchange server.  I want to implement active sync (Direct Push) for Windows mobile devices.  They need to communicate with over port 443.  The problem is I want mail to continue to flow to the Barracuda, but direct Direct Push traffic to the Exchange server.I cnow I can't implement two 1:1 NAT mappings from the same external hostname to 2 different servers.

View 3 Replies View Related

Cisco Firewall :: ASA 5510 With 8.0.2 - Exchange 2007 Outlook Anywhere / OWA Users

Aug 15, 2011

We have a ASA 5510 which was running 8.0.2, we recently upgraded it to 8.2.5 and since the upgrade remote users for exchange 2007 are not able to download any large email attachments(over or close to 1MB). This is only happening to Outlook anywhere users or OWA users who are connecting to the exchange server using https(443) externally. If the same users connects internally they do not face any issue. When i check the logs on ASA i am gettings lots of RESET-O and RESET-I entries. Looks like the connection between the client and the server gets reset.

View 14 Replies View Related

Cisco Firewall :: Can't Send Or Receive Email From Exchange Behind ASA 5510 With CSC

Jan 17, 2012

We are upgrading from a Pix 515e to a ASA 5510 with CSC SSM.  We cannot send outbound email or receive any email from the outside world. I have placed a call with Cisco Support with no luck. [code]

View 1 Replies View Related

Cisco Firewall :: Port Forwarding Exchange 2010 OWA Using ASA 5505?

Jun 26, 2012

I am trying to port forwarding Exchange 2010 OWA using ASA5505, wherever I used object NAT or Twice NAT it just doesn't work.... here is my config:
access-list outside-access remark "Exchange Server Access Rules"
access-list outside-access extended permit tcp any host <public x.x.x.11> eq smtp
access-list outside-access extended permit tcp any host <public x.x.x.11> eq https

note that i use public ip  <public x.x.x.9> on the outside interface for PAT, so all hosts in the same private can access internet

View 1 Replies View Related

Cisco Firewall :: ASA 5510 Barracuda Exchange Emails Deferred

Nov 29, 2011

Our ASA 5510 has been in place for nearly two years, we never have any issue what so ever with it. All along the ASA has been using the default policy. Lately, we beeen getting email deferred in our Barracuda Spam firewall. Google quickly reveals that ESMTP does not play nice with Barracuda witch i disabled eventhough we haven't had any issue with it before. However, the issue remains, we still getting email deferred in the barracuda.
While doing more troubleshooting on the ASA, I constated when issue the command show local-host + IP of the Barracuda, there is an IP address in outside of the interface that can get up to 96 UDP port 53 connections with the Barracuda, this connection never get lower than 20! However, when checking the default setup for the Barracuda, i have the values below:
Incoming SMTP Timeout: 20
Message per SMTP Session : 8
Maximum SMTP Error SMTP Session: 2
Maximum Connection per Client 30m:40
My question is if that ASA show up to 96 DNS session with an outside host to my barracuda, won't that push the barracuda to play email deferred timeout ? Should I change the barracuda default setting? Or should i change the connections limits for the Barracuda in the ASA?

View 3 Replies View Related

Cisco Firewall :: Difference ASA5510-BUN-K9 And ASA5510-Sec-Bun-K9

Jun 6, 2012

ASA 5510 have two model Bun-K9 and Sec-Bun-K9 from the datasheet find out difference Port related and Redundancy. My questions is : Have any major difference for Security service between two model ?

View 3 Replies View Related

Cisco Firewall :: 5510 Exchange Active Sync Stops Working

May 8, 2012

I know that I've run into this before but I can't remember the fix.  I have a 5510.  The 3 interfaces involved are INSIDE, OUTSIDE, and GUEST. Corporate users are allowed to put their iPhones on the Guest network, but the problem is that their Exchange ActiveSync stops working.  It is tied to the external DNS name of the OWA server (we'll say  So the users are funneled out one public IP on the OUTSIDE interface and are trying to communicate with the outside of the OWA server, which is NATed to another public IP on the same outside interface.  What do I need to do on the ASA to allow users on the guest network (behind the GUEST interface) to access the mail server using its public IP (behind the INSIDE interface)

View 1 Replies View Related

Copyrights 2005-15, All rights reserved