Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

No Access to Some sites

Every thing is working well in my firewall, I have the DMZ working ok, I can access the net, I can create a VPN into my network.

The only problem is that I can access most os the sites in the web, but there are some that do not work like http://www.microsoft.com or http://www.sapo.pt I don't understand what is going on.

Please help me.

8 REPLIES
Community Member

Re: No Access to Some sites

Hi,

Please post your configuration.

regards

skrao

Community Member

Re: No Access to Some sites

I used SDM for all configuration. I am not a command line expert. But attached is the corrent running configuration.

Community Member

Re: No Access to Some sites

Hi,

I couldn't find any issue with configuration.

regards

skrao

Community Member

Re: No Access to Some sites

I have a capture of the packets in a computer in the in-zone where I first reached site www.europeantour.com and then www.microsoft.com.

I can see a good redirect and then that I lost about 11000 bytes of packets.

Could it be a MTU problema?

Thanks,

Victor

:-)

Cisco Employee

Re: No Access to Some sites

is it pix or ASA ?

decrease the MSS to 1100 and then try

Community Member

Re: No Access to Some sites

I have a router 877w-n with firewall ios on it.

Community Member

Re: No Access to Some sites

Hi

check the match protocol dns, I had the same problem where www.intel.com wouldn't work. Change the default value from 512 to 1024, hopefully this might solve the problem

rich

Community Member

Re: No Access to Some sites

I am not an expert. Wich instrution sould I use to change it or can I use SDM console to change it.

320
Views
0
Helpful
8
Replies
CreatePlease to create content