Cannot access certain websites

aamercado · ‎04-23-2008

ASA 5520 with 7.2.1.

I cannot access certain websites. For example, www.nationalunderwriter.com

The capture attach shows asa-ca as a good working capture to compare with a asa-uk which is the bad capture. Note the negotiation is all 0 (ie window is 0). I already tried CCO exceed-mss workaround and still no worky so pretty sure it is not a mss issue

JORGE RODRIGUEZ · ‎04-23-2008

What error message are you getting on the browser, page not found? have you done any trace routes to that website IP address from your uk edge and see if your ISP does actually have a route to that site, I had very similar issues with couple of site and turned our ISP peering had routing problems. You may want to do a trace route from ca edge and compare it with uk trace and see how is handed off.

Rgds

Jorge

Jorge Rodriguez

aamercado · ‎04-24-2008

The error defaults to microsoft search page:

http://search.live.com/results.aspx?FORM=DNSAS&q=69.61.137.183

Traceroutes is fine and the capture I posted does show that the website responds but it breaks because the tcp negotiations is off