Cisco Firewall :: Cannot Access Certain Websites Behind PIX 501 With 6.2 FW
Oct 9, 2012
I have a PIX 501 with 6.2 FW. The firewall inside network is connected to a Windows server (Mailserver). I can get access to most websites on all clients as well as on the server. However, there are some particular websites, such as facebook.com that the server and all but one client cannot access. I get a "cannot display the webpage" in internet explorer.
I have disabled the Windows firewall and AV. I have also scanned for any malware and no malware was found.
I found on the forums a "fixup protocol dns" solution, but my PIX version does not support it.
Below is my config:
PIX Version 6.2(2)
nameif ethernet0 outside security0
nameif ethernet1 inside security100
[Code]......
View 12 Replies
ADVERTISEMENT
Nov 18, 2012
Has ASA5510-K8 as firewall, has access rules setup for restricted PCs: [code] permitOn those PCs, users can only browse the websites that are in favorites, but some of them are working, some are not.Test on unrestricted PC, websites that can’t be accessed from public PCs can be access on regular PCs , either by address or IP.Checked GPO setting, don’t see anything wrong there.
View 4 Replies
View Related
Dec 26, 2012
I am having an issue where I cannot access certain files on websites. It looks as though the files are accessed via ftp. Could my router be blocking it. I have a Cisco 2801 router acting as a firewall.
View 13 Replies
View Related
Feb 27, 2012
I have a problem with PIX 506E that meets the version 6.1, and in an simple computer network equipment seems to behave in strange ways because some web sites do not open or very open slow thereby its operation impracticable. On the other hand other web sites open normally.
Querying the web site of the Cisco, I found several documents discussing the same problem but in a later version ( 7.0 ), not in this version 6.1.
I've tried removing the pix from the network , not the error occurred, again insert pix however tested only with a machine, without the rest of the network and the problem persists
View 13 Replies
View Related
Aug 20, 2012
We have a Cisco ASA 5520 and Web sense. I added a filter but it seems like it is still not allowing us to access a certain website from most of the machines however some machines with the same configuration work on the DMZ. Accessing website tells us:
"Firefox has detected that the server is redirecting the request for this address in a way that will never complete".
Filter I applied on the firewall:
filter url except 0.0.0.0 0.0.0.0 64.18.218.0 255.255.255.0 allow
filter https except 0.0.0.0 0.0.0.0 64.18.218.0 255.255.255.0 allow
View 9 Replies
View Related
Apr 15, 2013
I have an configuration of ASA 5510:
ASA5510# show run
: Saved
:
ASA Version 8.3(1)
!
hostname ASA5510
domain-name lohoi.local
[Code]..
When i configure to block websites it's ok, but websites unblock to access very slowly, sometime i can't access. My company has 50 users, all most them can't access unblock sites. How can i configure it better?
View 1 Replies
View Related
Jan 20, 2013
I have installed a new ASA5510 with CSC, and everything is working properly except the access to websites using https. All sites/access to them seem to be blocked by the ASA. I have read that this access is by default enabled and I have tried to add configuration to allow https access to the firewall but without success. [code]
View 6 Replies
View Related
May 4, 2013
I have a Cisco ASA 5505 in my home office which has a few PCs behind it with a linux web server running some websites. I can access the websites from outside no problem (i.e. on my iPhone using a 3G connection). However, I struggle to access the websites from within the network. The ASA gives me this error: [code]
View 3 Replies
View Related
Aug 18, 2011
My company has a peer to peer network of 10 personal computers without a server. Operating systems from Windows XP to Vista. I've recently installed a Cisco RV120W Wireless-N VPN Firewall. It's configured in DHCP Server Mode with printers/copiers that have static IPs below the DHCP range.
I'm having a problem with certain stations being used for personal networking, shopping, etc. during business hours. Consequently I would like to limit internet access on these stations. However, some internet access is required because of online database software that's an integral part of our business. I've been reading in the Administration Guide about URL Blocking. Would it be possible to give static IPs to certain stations and then limit their internet access to 1 or 2 specific websites?
FYI, I've read about the Trusted Domains and Blocked Keywords but cannot quite understand how to parley this into the solution I need.
View 1 Replies
View Related
May 28, 2012
I have a cisco asa 5505 firewall. Is it possible to block secure websites in it like [URL]? I have already tried regular expression filtering but it filters only http traffic.
View 4 Replies
View Related
Feb 1, 2011
I am trying to access some websites and unable to do so
View 2 Replies
View Related
Apr 13, 2011
When clicking the Internet Explorer icon it won't open ANY webpage. My Internet connection works perfectly. My other computers are fine.
View 1 Replies
View Related
May 11, 2011
[url]...
I'm in Indore (India), whereas my friend from Mumbai can access them both.Also my ISP is Airtel.
View 3 Replies
View Related
Jan 13, 2013
Getting a message along the lines of: can't access this website when accessing certain websites such as the BBC and my university's intranet as well as random websites, also I can't access things like the online content on games such as far cry 3 or saints row 3.I've tried rebooting the router, I've tried the command prompt tracert, I've tried getting on other browsers with no avail and I've tried the other computers in my house and they've been getting on fine, tried full antivirus and malware scans and I've tried checking my firewall settings.
View 1 Replies
View Related
Nov 16, 2011
How to block a single website, but I want to do the opposite. I would like to block all website except for a handful of them. Any example configs?
View 3 Replies
View Related
Jul 17, 2012
I had an odd occurrence today on my network. One particular desktop running Vista could not access secure websites (httpsremoved the DHCP lease on my server (Windows 2008), let the desktop pick up a new address and all is good nowThis is a production network (domain) environment
View 3 Replies
View Related
Mar 26, 2013
I see the router and the modem are working just fine as usual and even the guy from comcast says there is nothing wrong with the internet connection itself.The problems I am having right now are
- I can only access to Facebook, Spotify, but nothing else.
- It sometimes randomly comes back and everything works but then it only lasts for a few minutes-hours and it goes off and won't work again. I've tried resetting the modem, router, and I even tried creating a new network but nothing worked out so far.I currently own a mac and a windows 7 laptop.
View 1 Replies
View Related
May 22, 2012
I have an XP machine that i am not access websites from. the machine is hardwired into a router, the other computers connected to the router(wifi) are able to get access websites without issue.here are the steps i have taken and the things i know so far.im pulling a valid ip address, with correct dns/gateway all that good stuff
able to ping other machines on the network, pings the router, and able to ping google.com(so i know there is connection between me and the internet, and that dns is working)
installed firefox to see if it was a problem with IE, no go.took a look at the active process and looked up anything that wasnt familiar, that seems to be good.virus scan with avast came up clean, avast is able to connect to its database and pull the most current virus defs.
there isnt a firewall, the only security measures on the computer is avast.
View 1 Replies
View Related
Dec 26, 2011
I cannot access any microsoft websites except when in safe mode + networking. I can browse all other websites just fine, but can only access any microsoft sites in safe mode.
View 3 Replies
View Related
May 25, 2012
I work for a small company where we have a simple network that runs from one router and I believe has a switch. We all have access to the network wirelessly or with cable.The internet was running ok up until yesterday when I came in to do some online banking and thought the site was down. However, turned out it was just me that was having trouble. I coudn't access secure sites like online banking or facebook for example. Now I was using the cable at the time and this wasn't working. When I tried wirelessly it would work... this confused me but not as much as when I found out that others in the office could use the cable and even more, there are 2 others who cannot connect to secure sites with cable or wireless.I was wondering what could have changed over night as this is what seemed to happen. Is it our ISP? (prob not as others are ok) so I'm thinking there must be some kind of setup issue in our configuration. I believe we are all using dynamic IP addresses but I'm not sure if thats even relevant
View 3 Replies
View Related
May 5, 2011
Over the past few months I've noticed that, although my USB adapter picks up a good signal from the router (never less than 65 - 70% signal strength) and stays connected to it I am at times unable to access any websites. It started off happening once or twice a week and could happen for about 5 - 10 minutes at a time but now happens several times a day and can stop me accessing the web even though the USB adapter says that it is still picking up the signal from the router. After a period of time it will just start working again, I don't have to restart the router or anything.I've tried changing the channel to a few different ones after using a utility to see what my neighbours were using but this hasn't made a difference. I'm using a Netgear RangeMax Dual Band Wireless-N USB Adapter. It has the N technology so should work pretty well.The current firmware version is 1.00VG dated 5th May 2009. In the router settings it allows you to search for an update for the firmware however it told me that my current version is the most up to date.
View 7 Replies
View Related
Nov 9, 2011
How to block the websites on Fortigate 50B firewall.
View 1 Replies
View Related
Aug 22, 2011
My problem is that after configuring my router's settings. I can't go to any websites other than the configuration page. I'm completely frustrated for days.icrosoft Windows XP [Version 5.1.2600]C) Copyright 1985-2001 Microsoft Corp.C:Documents and SettingsLe>ipconfig/all[CODE]
View 10 Replies
View Related
Jan 25, 2011
Is there an easy way to allow specific websites access in cisco router 1841? I am trying to allow a website through access list 102 but not working. I am using access-list 102 permit ip host 192.168.21.20 host www.website.comIf i allow all websites then it works fine.
View 1 Replies
View Related
Jul 11, 2011
I went through all discussions regarding how to block access to some web sites. And I was trying to implement them but it didn't work. I've used 887G-3G-K9 router and UC540, and I'm not sure if it's possible to do that on them or I need to get a license for that or to buy ASA. How can I check that URL blocking is available feature on those devices?
I've used 2 methods:
1) ACL
2) class-map and policy-map
class-map match-any http
match protocol http url "*facebook.com*"
match protocol http url "*www.facebook.com*"
[Code]....
View 1 Replies
View Related
Apr 15, 2013
We have purchased an RV110W and I need to restrict internet access to the entire internet with the exception of 4 websites that are required for employees to do their jobs. I need to do this on 3 specific machines, not the entire network. I have looked at the internet access and schedule management pages of the router and just can seem to figure out how to do this.
View 8 Replies
View Related
Feb 25, 2013
Now, i want to block some websites in cisco asa 5510 and in want to block key word like "sex", "game",..how can i config it?
View 3 Replies
View Related
May 21, 2011
I just completed a relocation of my core dtaa center network, whic included numerous vitualized servers, plus Cisco 3750 switches and ASA. The addressing did not change as this was internal to our overall network. After the move however some websites are not available. My first thought was a double NAT, but this does not seem to be the case.
View 1 Replies
View Related
Jan 12, 2013
I've been having a really annoying issue with my computer not connecting to the internet wirelessly I start the computer, and a connection is there via my router for about 30secs-2mins. After this, I can't access any websites. The full five bars remain white and the router is still seen by the computer, but there is a small yellow exclamation sign in front of it, and a mouse-over says "no internet access". I can still access when wired to the router through a cable, so I thought it might be an issue with my wireless card, but wireless USB adapters don't make a difference, even when I've disabled the wireless card. My drivers are all up to date, and I've even tried a full reformat and reinstall of Windows 7, to no avail. Other devices (a couple of computers and phones) can connect to the router fine, and the network even tried a new router, with no success. I have experienced this immediately after the reinstall, before either firewall (I use ZoneAlarm Free) or AV (I use Avast! Free) were installed, and I'm completely stuck.
View 19 Replies
View Related
Feb 5, 2012
I've installed aDIR655 for my friend's cafe and found that Clients ( both wired and WIFI ) have difficulties accessing Yahoo and MSN while Googles etc ( and other Newspaper and webmail sites are OK ) is fine.....I tried to reload and reboot and re-config etc but all in vain...
View 1 Replies
View Related
Jun 26, 2012
I'm using DIR 600 for home use. Recently, I noticed that I have trouble connecting to some websites (Twitpic.com, 4shared.com) which I never had any problems before I used the wireless router. It doesn't exactly block the websites but rather it won't load completely (i.e., with Twitpic, I can load the site but not the images; for 4shared I really can't load the page itself).Initially, I had problems updating JDownloader after installation. I tried using our old Edimax wired router, and the JDownloader update worked flawlessly. I also tried loading Twitpic while connected via LAN, and it also worked properly.I'm assuming the problem lies with the wireless router but when I set it up for use I only tinkered with the WPA/WPA2 security for a password-secured wifi connection at home, and nothing more since I can't understand the other features.
View 5 Replies
View Related
May 22, 2011
I just installed a Cisco ASA 5505 in my company's network,however the network became so slow and many websites cannot be opened or it takes toolong to open (yahoo, hotmail etc.) resulting to a request time out sometimes.
Here is my configuration:
ASA Version 8.2(1) !hostname xxxxxxenable password xxxxxx encryptedpasswd xxxxx encryptednames!interface Vlan1 nameif inside security-level 100 ip address 192.168.1.1 255.255.255.0 !interface Vlan2 nameif outside security-level 0 ip address
[Code].....
View 2 Replies
View Related
Feb 26, 2012
Like others I see on this board, we've got middle- and high-school age kids whose access to FB and other sites needs to be controlled/scheduled.
I thought the DIR-655 was great, in that it has features that, on the face of it, would seem to be ideal for blocking domains and restricting access.
My problem: I've never been able to get this to work.
I've set up schedules and created lists of domains that I want to limit access to according to the schedules, but the only constraint I've ever gotten to stick is blocking access completely to the router.
*None* of the schedule-based or website-based access controls have ever worked; I'll put the block in place to my daughter's computer's MAC address so she shouldn't be able to get to youtube or facebook, save, bounce the router, but then I go by her room and she's still busily chatting away online to her FB friends.
Based on similar posts I've seen on this forum, this may not be a unique problem.
So in a nutshell, this is what I want to do:
1) Block certain computers (identifiable by MAC address)
2) from being able to get to particular named domains (and any of their sub-domains)
3) according to a schedule that I can create and modify.
My preference would be to do this in the router, but again, responses I've seen here suggest that may not be possible.
View 1 Replies
View Related
