Gmail and Yahoo not accessible after zbfw implementation
I have implemented zbfw on Cisco 1800 series router. But after the implementation I could see that Gmail/Yahoo is not loading.Please could some one look into my config and advise. I can access all other websites without any issues.
class-map type inspect match-all ICMP match protocol icmp class-map type inspect match-all SMTP match protocol smtp class-map type inspect match-all HTTP-ACCESS match protocol http class-map type inspect match-all UDP match protocol udp class-map type inspect match-all HTTPs-ACCESS match protocol https class-map type inspect match-all TCP match protocol tcp class-map type inspect match-all DNS match protocol dns class-map type inspect match-all POP3 match protocol pop3 ! ! policy-map type inspect in-to-out-policy class type inspect HTTPs-ACCESS pass class type inspect HTTP-ACCESS inspect class type inspect UDP inspect class type inspect TCP inspect class type inspect DNS inspect class type inspect SMTP inspect class type inspect POP3 inspect class type inspect ICMP inspect class class-default policy-map type inspect out-to-in-policy class class-default drop ! zone security inside zone security outside zone-pair security in-to-out source inside destination outside service-policy type inspect in-to-out-policy zone-pair security out-to-in source outside destination inside service-policy type inspect out-to-in-policy
Sorry, I have put the pass command only for testing and wrongly copied the config with that. The actual configuration contain inspect for HTTPS. It is quite strange that all other HTTPS websites are working without any issue.
We are running version 12.3(8r)YH12 . Would this be the issue?
DocumentationCode download linksGoalRequirementLimitationsSupported ISR
and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationConfigure one of the connectivity
options to access the Cisco IMC from the n...
Firepower Threat Defense (NGFWv) on UCS E-series - Transparent Mode in
HA DocumentationCode download linksGoalRequirementLimitationsSupported
ISR and UCS-E ModelSupported ISRG2 and UCS-E Blades:Supported ISR4K and
UCS-E Blades:Step by Step ConfigurationCo...
Question I am currently unable to specify "crypto keyring" command when
configuring VPN connection on my cisco 2901 router. The following
licenses have been activated on my router :