New cisco asa 5510 setup

Hi,

Its simple, you have reboot with console connect, get into to ROM mode and change configuration registry so it will not load the saved configuration. Please refer Resetting the passwords on Cisco ASA 5510 Binary Royale Ltd for the step by step process

Your best bet is to place the ASA into 'transparent' mode, and letting the traffic pass through it and be inspected on the way through.

To do this you need to first do the following command:
firewall transparent

Once in transparent mode, the firewall will no longer look like a hop in the packets journey, and you can set rules to allow/disallow traffic using access lists on the inside and outside interfaces, plus you can perform packet inspections using policy-map and inspects.

Hope that helps!

All websites or specific ones?

If you want to block all web traffic, a straightforward rule preventing HTTP traffic (TCP port 80) as well as HTTPS (port 443) will block any and all web access.

If you just want to block specific sites, I'd recommend an access control list (ACL) configured to deny traffic to those specific site's IP addresses.

can you try lower encryption levels on each device and see if that helps? sometimes it is neccesary between Cisco and other devices.

Yes. The firewall will restart. Just be sure to save your running config to memory before turning off. For that you must issue the command: write memory.

Best Regards,
T

are you using hyper terminal? if you are using another program, switch to hyperterminal and reboot (if possible after saving config) with the cable connected. See if anything at all comes up on the screen.

Hello kuniksh,

Look at the below link for all configurations
http://www.akadia.com/services/cisco_router_firewall.html


Do rate this solution!!!!

Hi Thangaraj_j,

Can you provide the topology of your setup? Can you provide also the following:

- running configuration of the ASA
- ip address of the server (what kind of server is this? what tcp/udp port does it use)
- show xlate
- show con
- show log

Just a quick try, have you tried clearing the translation and the arp table?

commands to do it:

clear xlate
clear arp
clear local

Let me know and if it still doesn't work, try to ping the server from the pc clients and see if ping does work. (you need to allow icmp to pass thru in case you are denying it for testing purposes) Just send me the additional information given above.


Regards,

ex_ocsic_cat

If you can't get the manament working initially I suggest the following

Setup a console connection
Type "enable" and press enter to access priveleged exec mode on the ASA
Type "config terminal" and press enter to access configuration mode
Type "configure factory-default" and press enter to load default settings.
Assign a static IP to your PC of 192.168.1.5 and try to browse to https://192.168.1.1 (PC is plugged into management interface)

You should be prompted to begin using ASDM