Tag Info

New answers tagged

1

Does your host use a DNS name? If so, ask for DNS rewrite to be enabled on the Cisco ASA NAT rule for your host.


0

ok, I gotchya. I have this same complaint about NAT routers in general. It is so frustrating when you cannot connect to the external point of view from inside. This is quite often the case with many routers. You can work around this issue by using NAT within your Linux iptables to redirect an attempt to connect to the outside IP with a connection to the ...


0

Does the application allow manual override of where it binds? I assume this is ruled-out already. Is the external IP listed in /etc/hosts? From here, I'm going to go out there a little with this answer and focus on the application, not the nat. In particular, I'm going to explore what you can do outside the application to trick it. This would only be ...


3

what is the difference between inside_access_in and inside_access_out ? Inside_access_in and Inside_access_out are just friendly names for your access lists. In your case, Inside_access_in is an 'Inbound' access-list, and inside_access_out is an 'Outbound' access list. An inbound access-list is applied to traffic as it ENTERS that interface. ...


0

Cisco ASA has something called security levels, traffic from high level to low level is allowed by default, but you have to configure ACLs to allow traffic to come back. On the other hand, you can configure CBAC on ASA.


0

Figured this out, posting what I believe is the answer: The problem was with the ACL within the Access Rules settings. It seems in the 8.3 software the Destination Criteria, Destination: should no longer be the 'outside interface' but the Network Object destination itself. It seems Cisco switched the configuration from being what seems backwards, to the ...


0

Maybe the answer is yes. It is basically a hairpin NAT, attested to in Cisco page about dns doctoring. I tried to make this work on another firewall in a different office. Below are some configuration that seems to redirect the traffic as I desired. I made these config in the ASDM, but I am only feeling my way through. I hope an expert can help me find ...


0

So, not entirely helpful here, but we have replaced that ASA with a Mikrotik router and this issue has gone away. It's clearly some sort of bug or issue with the Cisco ASA, but I've basically got fed up with these small ASA's and started replacing them.



Top 50 recent answers are included