Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
New Member

ASA 8.25 upgrade to 9.14 problem

We have just upgraded our ASA 5510 from 8.25 to 9.14 via 8.47 using ASDM and everything seemed to be working.

However we have an external program that accesses a server in our DMZ that has stopped and we just cant see the issue.

Without copying in our entire asa config, is there anything obvious that anyone can think of that could be causing the issues. We have been looking at the NAT and access rules and trying to work out how it has changed.

Everyone's tags (1)
1 ACCEPTED SOLUTION

Accepted Solutions
New Member

Re: ASA 8.25 upgrade to 9.14 problem

The first things that spring to mind is og course NAT and ACL. Maybe check the arp that are registred to the dmz interface. Also run a "show xlate" and check for the dmz server address.

Are there no connection ? ICMP (ping) ?

Hsve you run the packet tracer, either from asdm CLI ?

Sent from Cisco Technical Support iPhone App

Please rate as helpful, if that would be the case. Thanx
3 REPLIES
New Member

Re: ASA 8.25 upgrade to 9.14 problem

The first things that spring to mind is og course NAT and ACL. Maybe check the arp that are registred to the dmz interface. Also run a "show xlate" and check for the dmz server address.

Are there no connection ? ICMP (ping) ?

Hsve you run the packet tracer, either from asdm CLI ?

Sent from Cisco Technical Support iPhone App

Please rate as helpful, if that would be the case. Thanx

Re: ASA 8.25 upgrade to 9.14 problem

Hello,

PRovide the output you will get from

packet-tracer input outside tcp x.x.x.x (host on the outside that connects)  1025 y.y.y.y (public address of server) # (port where it listens)

Example

packet-tracer input outside tcp 4.2.2.2 1025 8.8.8.8 80

Rate all of the helpful posts!!!

Regards,

Jcarvaja

Follow me on http://laguiadelnetworking.com

Julio Carvajal
Senior Network Security and Core Specialist
CCIE #42930, 2xCCNP, JNCIP-SEC
New Member

Re: ASA 8.25 upgrade to 9.14 problem

In case anyone has the same issue.

Our managed Internet provider had to make a few simple route changes to their firewall.

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/113577-ptn-113577.html

710
Views
0
Helpful
3
Replies
CreatePlease to create content