Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
New Member

Network Issue

Hi, We have just installed a FW ASA 5505 in production at datacenter and since then we have been experiencing very strange behaviour in the Network. The Network details are following:

1) Inside 100 V-lan 100

2) DMZ 50 V-lan 200

3) Outside 0 V-lan 2

Our Application Server are placed in DMZ Zone and DB in Inside Zone and both Inside and DMZ Zone Traffic are exempted and allowed IP Protocol but the main issue is, when i hit to access any Application from Outside Network then I recieve a Transport Level error and Developers has also checked the DB and App Server and according to their review its a connectivity issue which is breaking intermidiately. When I try to troubleshoot and use Ping, Traceroute or review the FW logs then it shows everything is working fine and Transport logs is also making in DB Server. I moved DB Sever in the DMZ Zone then Application works fine and no tranport logs create in the DB. Can anyone advice on that???


Re: Network Issue


Re: Network Issue


Kindly check the connection table output and ensure if the conn is being formed.

Check the db server with netstat -n command and see if there r any conn formed on the server for outside hosts.

Check the acl on the outside interface and see if ur getting hit counts for the same.

Run the packet trace command and check where the traffic is being dropped.

If possible kindly attach ur config file for further analysis.



CreatePlease to create content