IPS blocking gmail

Unanswered Question
Mar 7th, 2007

I install two ASA5540 with IPS modules. One is active and the other is stanby. Some users complain that gmail users can not send mail to us. I have try with my gmail account and some time is not comming thru and some time is fine. Any ideas?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (1 ratings)
Loading.
Kamal Malhotra Thu, 03/08/2007 - 05:24

Hi,

For confirmation whether IPS is blocking it or not, I would suggest looking ata the event monitor and checking if any signature is getting fired with the relevant addresses. If yes what the action is. You might want to change the action for this signature.

HTH,

Please rate if it helps,

Regards,

Kamal

mba-pd Thu, 03/08/2007 - 08:35

I will see if we can get an ATA. It is strange because I don't have too much config on the sensor. I update it to 6.0 two days ago and rigth now I am just looking the logs.

Thank you

mba-pd Sat, 03/10/2007 - 13:00

It wasn't the IPS module on the ASA blocking it. It was the ASA. Here is the fix

pixfirewall(config)#policy-map global_policy pixfirewall(config-pmap)# class inspection_default pixfirewall(config-pmap-c)# no inspect esmtp pixfirewall(config-pmap-c)# exit pixfirewall(config-pmap)# exit pixfirewall(config)#

Basicly i had to turn off esmtp and now is fine.

Actions

This Discussion