IPS blocking gmail

Unanswered Question
Mar 7th, 2007
User Badges:

I install two ASA5540 with IPS modules. One is active and the other is stanby. Some users complain that gmail users can not send mail to us. I have try with my gmail account and some time is not comming thru and some time is fine. Any ideas?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (1 ratings)
Kamal Malhotra Thu, 03/08/2007 - 05:24
User Badges:
  • Cisco Employee,


For confirmation whether IPS is blocking it or not, I would suggest looking ata the event monitor and checking if any signature is getting fired with the relevant addresses. If yes what the action is. You might want to change the action for this signature.


Please rate if it helps,



mba-pd Thu, 03/08/2007 - 08:35
User Badges:

I will see if we can get an ATA. It is strange because I don't have too much config on the sensor. I update it to 6.0 two days ago and rigth now I am just looking the logs.

Thank you

mba-pd Sat, 03/10/2007 - 13:00
User Badges:

It wasn't the IPS module on the ASA blocking it. It was the ASA. Here is the fix

pixfirewall(config)#policy-map global_policy pixfirewall(config-pmap)# class inspection_default pixfirewall(config-pmap-c)# no inspect esmtp pixfirewall(config-pmap-c)# exit pixfirewall(config-pmap)# exit pixfirewall(config)#

Basicly i had to turn off esmtp and now is fine.


This Discussion