ASA 8.25 upgrade to 9.14 problem

[sprocket10]

We have just upgraded our ASA 5510 from 8.25 to 9.14 via 8.47 using ASDM and everything seemed to be working.

However we have an external program that accesses a server in our DMZ that has stopped and we just cant see the issue.

Without copying in our entire asa config, is there anything obvious that anyone can think of that could be causing the issues. We have been looking at the NAT and access rules and trying to work out how it has changed.

[Jon Are Endrerud · Accepted solution]

The first things that spring to mind is og course NAT and ACL. Maybe check the arp that are registred to the dmz interface. Also run a "show xlate" and check for the dmz server address.

Are there no connection ? ICMP (ping) ?

Hsve you run the packet tracer, either from asdm CLI ?

Sent from Cisco Technical Support iPhone App

[Julio Carvajal]

Hello,

PRovide the output you will get from

packet-tracer input outside tcp x.x.x.x (host on the outside that connects)  1025 y.y.y.y (public address of server) # (port where it listens)

Example

packet-tracer input outside tcp 4.2.2.2 1025 8.8.8.8 80

Rate all of the helpful posts!!!

Regards,

Jcarvaja

Follow me on http://laguiadelnetworking.com

[sprocket10]

In case anyone has the same issue.

Our managed Internet provider had to make a few simple route changes to their firewall.

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/113577-ptn-113577.html