ASA 5505 initial build - Failed to locate egress interface (Please help :-) )

Hi, I have just purchased a ASA 5505 and have completed the initial setup via the wizard.  I am currently unable to access services on the outside of the ASA. 
The error: 'Failed to locate egress interface for UDP from inside'....  appears when ever my DNS server attempts a lookup. 
I have configured this several times from scratch using the wizard and I am unable to figure out the issue with the NAT / Routing config. 
If I run the packet tracer I get the error: "(no-route) no route to host", however I do have a default route configured so I suspect it maybe my NAT configuration. 
Overview, 192.168.10.0/24 inside the ASA, 192.168.1.0/24 outside the ASA, 192.168.1.1 is the gateway to the internet.  I ideally want the ASA to use PAT to mask the 192.168.10.0/24 network behind the ASAs 192.168.1.0/24 network address but still allow clients to gain internet access. 
Full config follows, screen shots attached, any help would be very gratefully received. 
Result of the command: "sh run"
: Saved
ASA Version 9.0(1)
hostname firewall
enable password (REMOVED) encrypted
passwd (REMOVED) encrypted
names
interface Ethernet0/0
 switchport access vlan 2
interface Ethernet0/1
interface Ethernet0/2
interface Ethernet0/3
interface Ethernet0/4
interface Ethernet0/5
interface Ethernet0/6
interface Ethernet0/7
interface Vlan1
 nameif inside
 security-level 100
 ip address 192.168.10.1 255.255.255.0
interface Vlan2
 nameif outside
 security-level 0
 ip address 192.168.1.254 255.255.255.0
interface Vlan5
 no nameif
 security-level 50
 ip address dhcp
ftp mode passive
object network obj_any
 subnet 0.0.0.0 0.0.0.0
object network Server1
 host 192.168.10.10
object network GoogleDNS1
 host 8.8.8.8
 description Google DNS Server
object network GoogleDNS2
 host 8.8.4.4
 description Google DNS Server
object network 192.168.10.x
 subnet 192.168.10.0 255.255.255.0
object network InternetRouter
 host 192.168.1.1
object-group network DM_INLINE_NETWORK_1
 network-object object GoogleDNS1
 network-object object GoogleDNS2
object-group service DM_INLINE_TCP_1 tcp
 port-object eq www
 port-object eq https
access-list inside_access_in remark External DNS Lookups
access-list inside_access_in extended permit udp object Server1 object-group DM_INLINE_NETWORK_1 eq domain
access-list inside_access_in extended permit tcp 192.168.10.0 255.255.255.0 any object-group DM_INLINE_TCP_1
access-list inside_access_in extended deny ip any any
pager lines 24
logging enable
logging asdm informational
mtu inside 1500
mtu outside 1500
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
no arp permit-nonconnected
nat (inside,outside) source dynamic any interface
object network obj_any
 nat (inside,outside) dynamic interface
access-group inside_access_in in interface inside
route outside 0.0.0.0 255.255.255.255 192.168.1.1 1
timeout xlate 3:00:00
timeout pat-xlate 0:00:30
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
user-identity default-domain LOCAL
http server enable
http 192.168.1.0 255.255.255.0 inside
http 192.168.10.0 255.255.255.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart warmstart
crypto ipsec security-association pmtu-aging infinite
crypto ca trustpool policy
telnet timeout 5
ssh timeout 5
ssh version 2
console timeout 0
dhcpd auto_config outside
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
prompt hostname context
no call-home reporting anonymous
Cryptochecksum:(REMOVED)
: end

Just to want to be sure, can you post output from show int ip brie and show route? And try to remove your ACL for testing purpose or at least don't applied it anywhere yet. 
Once done, try do another packet-tracer to 8.8.8.8 using icmp packet instead of UDP paste the whole the output here. Before doing this, add icmp any any outside command on the ASA.
I know this should have anything to do with your issue, because if ACL is the issue then you will see output being denied by ACL on the packet tracer output. Let us know the results.

Similar Messages

  • Photoshop CS6 could not update successfully.  Error codes Adobe Photoshop 13.0.1.3 Installation failed. Error Code: U44M1P7  Extension Manager 6.0.8 Update Installation failed. Error Code: U44M1P7  Please help me figure out how to call customer service. 

    Photoshop CS6 could not update successfully.  Error codes Adobe Photoshop 13.0.1.3 Installation failed. Error Code: U44M1P7  Extension Manager 6.0.8 Update Installation failed. Error Code: U44M1P7  Please help me figure out how to call customer service.  I would prefer to talk to someone directly.

    Are you using any disk cleaner or optimization tools like CleanMymac or Mackeeper?
    Regards,
    Ashutosh

  • I just got the macbook air for christmas and i also got the dr dre headphones so i am trying to enable my soundcheck on my iTunes but i cannot figure out how to find where sound check is located can someone please help!!

    i just got the macbook air for christmas and i also got the dr dre headphones so i am trying to enable my soundcheck on my iTunes but i cannot figure out how to find where sound check is located can someone please help!!

    Go to the iTunes menu > Preferences > Playback.

  • My iPhone stolen and I download find my iPhone on it also I can sea it online but I can't locate it so please help me .. What should I do . I heard apple support can activate the GBS and send it to my e_mail . So I hope they can help me with that ...

    My iPhone stolen and I download find my iPhone on it also I can sea it online but I can't locate it so please help me .. What should I do . I heard apple support can activate the GBS and send it to my e_mail . So I hope they can help me with that ...
    Best wishes ..
    <Email Edited by Host>

    These are user-to-user forums, I've asked the hosts to remove your email address from your post.
    Apple and/or iTunes support can't locate it for you, only you can potentially locate it via http://icloud.com on a computer or Find My iPhone / Find My iPad on another device - but that will only work if it's connected to a network and the device hasn't already been wiped and/or Find My iPhone disabled on it.
    If it was stolen then you should report it to the police. You should also change your iTunes account password, your email account passwords, and any passwords that you'd stored on websites/emails/notes etc.

  • I synced my iphone to my computer now I cant locate my notes, please help.

    I syned my iphone to my computer now I cant locate my notes, please help.

    Try restoring your device.

  • ASA 5505 Logging Issue - Warning: Configured logging host interface conflicts with route table entry

    I am getting this warning on my ASA 5505 when I try to set up logging from my off site FW to the central FW, which is a 5510. What I am trying to do is send the FW logs through the VPN Tunnel into the central 5510 to our logging server at 192.168.22.99, but allow all other traffic out the outside interface so customers can hit our web servers down there. Here is an example of my config with fake IP's. I get this error when trying to do "logging inside host 192.168.22.99". If I try to put in "logging Tunnel host 192.168.22.99" I get the "Warning:Security Level is 1" message
    5505
    ethe0/0
    desc To LA ISP (217.34.122.1)
    switchport access vlan2
    ethe0/1
    desc To Redwood City HQ via VPN Tunnel
    switchport access vlan1
    ethe0/2
    desc To Internal Web Server
    switchport access vlan3
    VLAN1
    desc Tunnel to HQ
    ifinterface Tunnel
    security level 1
    217.34.122.3 255.255.255.248
    VLAN3
    desc Internal Web Server
    ifinterface inside
    security level 100
    192.168.0.1 255.255.255.0
    access-list LosAngeles extended permit ip 192.168.0.0 255.255.255.0 192.168.22.0 255.255.255.0
    (No access-group is performed, as I match from the crypto map instead since I have multiple sites going out of HQ - see HQ configs)
    route Tunnel 192.168.22.0 255.255.255.0 65.29.211.198
    crypto map TO-HQ 10 match address LosAngeles
    crypto map TO-HQ set peer ip 65.29.211.198
    5510 at HQ
    access-list LA extended permit ip 192.168.22.0 255.255.255.0 192.168.0.0 255.255.255.0
    (again no access-group, since I have a couple other off sites)
    crypto map TO-LA 20 match address LA
    crypto map TO-LA 20 set peer ip 217.34.122.3

    Hi Jouni,
    I have the following configs in place with fake IPs
    5505
    1 outside interface with security level 0 (vlan1 direct connect to isp 217.33.122.2/30) - goes to ISP
    1 Tunnel interface with security level 1 (vlan 2 direct connect to isp 217.33.122.6/30) - goes to Tunnel to our 5510
    1 inside interface with security level 100 (servers connected to hub, with vlan3 ip of 192.168.0.1)
    access-list LosAngeles extended permit ip 192.168.0.0 255.255.255.0 192.168.22.0 255.255.255.0 - acl to 5510 inside network
    route outside 0.0.0.0 0.0.0.0 217.33.122.1 - route for all traffic (except for 192.168.22.0/24) to take the outside connection
    route Tunnel 192.168.22.0 255.255.255.0 65.29.211.198 - route for 192.168.22.0 destined traffic to take the Tunnel connection
    crypto map  TO-HQ 10 match address LosAngeles
    crypto map TO-HQ 10 set peer ip 65.29.211.198
    tunnel-group 65.29.211.198 type ipsec-l2l
    5510
    1 outside interface with security level 0 (vlan1 direct connect to isp 65.29.211.198) - goes to isp
    1 inside interface with security level 100 (vlan2 connection to corporate servers and SIP 192.168.22.0/24)
    access-list LA extended permit ip 192.168.22.0 255.255.255.0 192.168.0.0 255.255.255.0
    access-list OUTBOUND extended permit icmp host 217.33.122.6 host 192.168.22.99 (allows Nagios monitor to ping the DE interface
    access-group OUTBOUND in interface outside
    nat (inside,outside) static 192.168.22.99 interface destination static 217.33.122.6
    route outside 192.168.0.0 255.255.255.0 217.33.122.6
    crypto map TO-LA 20 match address LA
    crypto map TO-LA 20 set peer ip 217.33.122.6
    tunnel-group 217.33.122.6 type ipsec-l2l
    I am mistaken on the 5510 interfaces. They do not have vlans, and the IP address is directly applied to the interfaces for outside and inside.

  • My ipad has been stolen by one of my room mates. How do I set up icloud on it if i dont have it so I can locate it? PLEASE HELP!

    Please help me. I need to set up icloud some how so I can locate my ipad that was stolen.

    I'm afraid that if you didn't have iCloud set up and 'Find My iPad' enabled on it before it was stolen there is nothing you can do. It's not possible to activate this facility remotely.

  • Adobe Premeire Pro Installation Failed - Application Manager Corrupted.  Please help!

    Hello all,
    I just recently purchased a subscription license for Adobe Premeire Pro CS6, and tried to download it following the instructions in the confirmation e-mail.   After installing the application manager and downloading, extracting, and installing the program, I received the error message seen in the image below, "Installation Failed - Adobe Application Manager is corrupted and must be reinstalled".  
    So of course I googled it, and found that this was a pretty common problem, and found one site that recommended re-installing the AAM with the following link:
    http://helpx.adobe.com/creative-cloud/kb/download-error-403-launching-aam.html
    So I did that too.  In addition to restarting my computer, and also tried to download the program directly bypassing the AAM following the instructions on this page:
    http://prodesigntools.com/adobe-cs6-direct-download-links.html
    All of which was unsuccesful.   I've got a video for my Mom's 60th birthday that I HAVE to complete this weekend, and Adobe's support is closed on the weekends.  I didn't think installing something from a company like Adobe would be this difficult.  Makes me wish I had a Mac.    Can anyone PLEASE help me get Premeire (and Encore) downloaded and installed? 
    Any help would be hugely appreciated.   Thanks,
    Erik
    (Some basic tech info:  Windows 7 Home Premium x64, Mozilla Firefox, and a beast of a gaming rig that should be able to handle a simple Adobe installation)

    Hi Jeff,
    I am experiencing the same exact problem and am unable to resolve it.  I've called Tier 1 support (Indian Call Center), and went through all the steps that I have already done myself (as outlined above) with no luck.  I'm still getting the corruption error. 
    I am using Parallels Workstation Extreme and it is being installed on a Virtual Machine.  The "Extreme" part of Parallels Workstation allows me to assign a discrete graphics card to the VM.  This is uing Intel's vt-d technology for Directed IO.  You mentioned above that you had fired up an instance of Windows 7 64-bit and it worked just fine.  But for some reason, I am unable to duplicate the same success.  The case is now being escalated to "higher" support.  Here is my setup:
    - Parallels Workstation Extreme VM - Windows 7 64-bit
    - Subscription to Creative Cloud
    - Clean Install does not work
    - Not a part of any domain, just workgroup
    - Home PC, so it connects directly to a router and then to Cox (ISP)
    - Has direct assignment of a Network card, meaning the network card is not a bridged connection (the VM gets it's own NIC)
    - User account is already Administrator, but tried to "Run as administratot" with no luck.
    - After install on the clean Windows didn't work, tried using the Adobe Cleanup Tool - doesn't work either
    - Disabled all start up programs from msconfig - doesn't work
    - Verified that the (.exe) does work, but coping the same (.exe) to another computer and it works.
    I would really appreciate any advice that you may have!
    Thanks Jeff!
    Here is what I am seeing from the log:
    02/24/13 20:50:36:197 | [INFO] |  | UPDATER | CORE |  |  |  | 3296 | >>> Adobe Updater Log Begin >>>
    02/24/13 20:50:36:197 | [INFO] |  | UPDATER | CORE |  |  |  | 3296 | UpdaterCoreImpl::InitLogFile : Application Version 7.0.0.42
    02/24/13 20:50:36:197 | [INFO] |  | UPDATER | CORE |  |  |  | 3296 | UpdaterCoreImpl::InitLogFile : cmdline option --> -logFile = C:\Users\Administrator\AppData\Local\Adobe\AAMUpdater\1.0\aamu.log
    02/24/13 20:50:36:197 | [INFO] |  | UPDATER | CORE |  |  |  | 3296 | UpdaterCoreImpl::InitLogFile : cmdline option --> -logLevel = 2
    02/24/13 20:50:36:197 | [INFO] |  | UPDATER | CORE |  |  |  | 3296 | Stepped into << UCInitialize >> call
    02/24/13 20:50:36:214 | [INFO] |  | UPDATER | CORE |  |  |  | 3296 | UpdateTracker::CheckSignature(): Missing CSUTracker.xml. Checking if it is updater's first run..
    02/24/13 20:50:36:260 | [INFO] |  | UPDATER | CORE |  |  |  | 3296 | UCInitialize : AAM is launched via CCM.
    02/24/13 20:50:36:261 | [INFO] |  | UPDATER | CORE |  |  |  | 3296 | Stepped into << UCSetUpdateEnginePath >> call
    02/24/13 20:50:36:303 | [INFO] |  | UPDATER | CORE |  |  |  | 3296 | UCSetUpdateEnginePath : WARNING - Update engine executable signature is not valid = C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\core\..\CCM\..\UWA\Adobe Application Manager (Updater).exe
    02/24/13 20:50:36:303 | [INFO] |  | UPDATER | CORE |  |  |  | 3296 | Returning from << UCSetUpdateEnginePath >> call error = 26 retVal = 0
    02/24/13 20:50:36:303 | [INFO] |  | UPDATER | CORE |  |  |  | 3296 | UCInitialize: Failed to set update engine path
    02/24/13 20:50:36:303 | [INFO] |  | UPDATER | CORE |  |  |  | 3296 | Returning from << UCInitialize >> call error = 26 retVal = 1
    02/24/13 20:51:34:421 | [INFO] |  | UPDATER | CORE |  |  |  | 1392 | >>> Adobe Updater Log Begin >>>
    02/24/13 20:51:34:422 | [INFO] |  | UPDATER | CORE |  |  |  | 1392 | UpdaterCoreImpl::InitLogFile : Application Version 7.0.0.42
    02/24/13 20:51:34:422 | [INFO] |  | UPDATER | CORE |  |  |  | 1392 | UpdaterCoreImpl::InitLogFile : cmdline option --> -logFile = C:\Users\Administrator\AppData\Local\Adobe\AAMUpdater\1.0\aamu.log
    02/24/13 20:51:34:422 | [INFO] |  | UPDATER | CORE |  |  |  | 1392 | UpdaterCoreImpl::InitLogFile : cmdline option --> -logLevel = 2
    02/24/13 20:51:34:422 | [INFO] |  | UPDATER | CORE |  |  |  | 1392 | Stepped into << UCInitialize >> call
    02/24/13 20:51:34:445 | [INFO] |  | UPDATER | CORE |  |  |  | 1392 | UCInitialize : AAM is launched via CCM.
    02/24/13 20:51:34:446 | [INFO] |  | UPDATER | CORE |  |  |  | 1392 | Stepped into << UCSetUpdateEnginePath >> call
    02/24/13 20:51:34:496 | [INFO] |  | UPDATER | CORE |  |  |  | 1392 | UCSetUpdateEnginePath : WARNING - Update engine executable signature is not valid = C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\core\..\CCM\..\UWA\Adobe Application Manager (Updater).exe
    02/24/13 20:51:34:496 | [INFO] |  | UPDATER | CORE |  |  |  | 1392 | Returning from << UCSetUpdateEnginePath >> call error = 26 retVal = 0
    02/24/13 20:51:34:496 | [INFO] |  | UPDATER | CORE |  |  |  | 1392 | UCInitialize: Failed to set update engine path
    02/24/13 20:51:34:496 | [INFO] |  | UPDATER | CORE |  |  |  | 1392 | Returning from << UCInitialize >> call error = 26 retVal = 1

  • Install Failed - The Disk is damaged [Please Help]

    Hi, i am new to mac stuff i just got my macbook everything works fine but whenever i try to install .pkg files it opens installing and prepares for install and when i click continue it keep says "install failed The disc is damage". am trying to install ps2 emulator i downloaded it from psx official website, it has all the files that mac would need to install but it do not install.. i  thought there might be something wrong with emulator so i downloaded another software and the problem remains same. it works fine with my another macbook so i guess there must be something wrong in OSX . Please help solving this issue.
    i am running leopard 10.5.8 at 4GB RAM 160 HDD.

    You need to try repairing the hard drive using Disk Utility.  If that does not work, you could try another tool, like DiskWarrior or TechTool Pro, but my personal advice would be to just erase the hard drive.  (Of course, you'll want to make sure your data is well backed-up first.)  If that doesn't work, your drive has failed and will need to be replaced.

  • Failing Hard Drive...PLEASE HELP FAST!!!!

    I noticed today under the Disk Utility that the S.M.A.R.T. status of my internal hard drive is "failing." I have done as much research as possible and come to the sad truth that I am going to have to replace it. This is my only computer and I am a poor college kid. I have a 160gb Lacie FireWire drive that has a partition big enough to hold my current entire system. The partition will need to be erased though and set up to do the backup. What I need to know is how exactly I can move all my data over to the Lacie and be able to boot from there and not lose anything (if possible). I know that soon my drive will probably fail and I need to be able to just start booting from the Lacie and run everything as I do now. And remember, I am a poor college kid so if there is any way to do this without having to shell out any dough for software, that would be greatly appreciated. Also, I tried to use Carbon Copy Cloner to backup my current system to the partition but whenever I rebooted to that as the startup disk, it wouldn't accept my login password, rendering the whole process basically useless to me. Please help out a fellow Mac lover. I don't want to have to go back to Windows Land, even for a minute!
    Mikal

    Ok...You are correct...It is only when I boot from the Lacie that it is saying that. When I booted back to the internal drive it said it was failing still.
    I used Carbon Copy Cloner (free) to make the bootable copy and it did a marvelous job. If you have FileVault turned on you may run into a few odd little things. Go to the website and download it and make sure to peek into the forums before you try and do the copy. They have great explanations of everything you need to do to make it work. The only problem I had was that after I got it all copied over it wouldnt let me sign into my account and I had to do some undercover Darwinning to get it to work. But I have been running off my Lacie for about 5ish days now and haven't missed a beat. (Besides the fact that my laptop is chained to my desk now...No late night surfing in bed!) It really is like absolutely nothing has changed, because nothing has! In fact, my PB is actually running a little faster because the Lacie is 7200 rpm and my internal was 5400! Makes me really glad I got the 7200rpm Hitachi to replace the failing Toshiba.
    (Also, I own no stock in Carbon Copy Cloner, it is just a great product! And free!)

  • Cisco ASA 5505 - problem with ssh, icmp on OUTSIDE interface

    Hi all,
    I have a very strange problem with OUTSIDE interface and remote ssh. Well, I have followed documentation and configure remote access for ssh like this [1.]. If I want to connect from internet to OUTSIDE interface [2.] get no response and in log I can see this message [3.]. I really do not understand why is ssh connection dropped by OUTSIDE access-list [4.]? If I understand documentation correctly there is no impact for remote mangement/access like icmp, ssh, http(s) by interface access-list. So, why?
    When I try ssh connection form internal network to INSIDE interface everything works fine and I can log in to ASA. If I try allow ssh in OUTSIDE access-list still no success and a get this message [5.]? It is strange, isn't?
    The same problem with icmp if I want to "ping" OUTSIDE interface from internet a get thish message in log [6.] and configuration for ICMP like this [7.].
    Full ASA config is in attachment.
    Can anybody help how to fix it and explain what is exactly wrong.Thanks.
    Regards,
    Karel
    [1.]
    ssh stricthostkeycheck
    ssh 10.0.0.0 255.255.255.0 INSIDE
    ssh 0.0.0.0 0.0.0.0 OUTSIDE
    ssh timeout 60
    ssh version 2
    ssh key-exchange group dh-group1-sha1
    ASA-FW01# show ssh
    Timeout: 60 minutes
    Version allowed: 2
    10.0.0.0 255.255.255.0 INSIDE
    0.0.0.0 0.0.0.0 OUTSIDE
     [2.]
    ASA-FW01# show nameif
    Interface                Name                     Security
    Vlan10                   INSIDE                   100
    Vlan20                   EXT-VLAN20                 0
    Vlan30                   EXT-WIFI-VLAN30           10
    Vlan100                  OUTSIDE                    0
    ASA-FW01# show ip
    System IP Addresses:
    Interface                Name                   IP address      Subnet mask     Method
    Vlan10                   INSIDE                 10.0.0.1        255.255.255.0   CONFIG
    Vlan20                   EXT-VLAN20             10.0.1.1        255.255.255.0   CONFIG
    Vlan30                   EXT-WIFI-VLAN30        10.0.2.1        255.255.255.0   CONFIG
    Vlan100                  OUTSIDE                85.71.188.158   255.255.255.255 CONFIG
    Current IP Addresses:
    Interface                Name                   IP address      Subnet mask     Method
    Vlan10                   INSIDE                 10.0.0.1        255.255.255.0   CONFIG
    Vlan20                   EXT-VLAN20             10.0.1.1        255.255.255.0   CONFIG
    Vlan30                   EXT-WIFI-VLAN30        10.0.2.1        255.255.255.0   CONFIG
    Vlan100                  OUTSIDE                85.71.188.158   255.255.255.255 CONFIG
    ASA-FW01# show interface OUTSIDE detail
    Interface Vlan100 "OUTSIDE", is up, line protocol is up
      Hardware is EtherSVI, BW 100 Mbps, DLY 100 usec
            Description: >>VLAN pro pripojeni do internetu<<
            MAC address f44e.05d0.6c17, MTU 1480
            IP address 85.71.188.158, subnet mask 255.255.255.255
      Traffic Statistics for "OUTSIDE":
            90008 packets input, 10328084 bytes
            60609 packets output, 13240078 bytes
            1213 packets dropped
          1 minute input rate 15 pkts/sec,  994 bytes/sec
    [3.]
    Jan 13 2015 06:45:30 ASA-FW01 : %ASA-6-106100: access-list OUTSIDE denied tcp OUTSIDE/193.86.236.70(46085) -> OUTSIDE/85.71.188.158(22) hit-cnt 1 first hit [0xb74026ad, 0x0]
    [4.]
    access-list OUTSIDE remark =======================================================================================
    access-list OUTSIDE extended permit icmp any any echo-reply
    access-list OUTSIDE extended deny ip any any log
    access-group OUTSIDE in interface OUTSIDE
    [5.]
    Jan 12 2015 23:00:46 ASA-FW01 : %ASA-2-106016: Deny IP spoof from (193.86.236.70) to 85.71.188.158 on interface OUTSIDE
    [6.]
    Jan 13 2015 06:51:16 ASA-FW01 : %ASA-4-400014: IDS:2004 ICMP echo request from 193.86.236.70 to 85.71.188.158 on interface OUTSIDE
    [7.]
    icmp unreachable rate-limit 1 burst-size 1
    icmp permit 10.0.0.0 255.0.0.0 INSIDE
    icmp permit 10.0.0.0 255.0.0.0 EXT-WIFI-VLAN30
    icmp permit any OUTSIDE

    You're right that the ACL should not affect otherwise allowed communications to the interface address.
    Try disabling the ip audit feature on your outside interface.
    no ip audit interface OUTSIDE AP_OUTSIDE_INFO
    no ip audit interface OUTSIDE AP_OUTSIDE_ATTACK

  • IPod touch failed set-up via USB - please help?

    NB - this is not related to my Mac computer. I am connecting an iPod touch 4th generation to a Windows machine running XP (SP3).
    The iPod is new and I can't get it to set up via USB connection to computer running iTunes (I have mobile broadband, and it isn't a wireless connection). I have tried the minimum, older version of iTunes and the most up-to-date version.
    On connection, both the iPod and iTunes acknowledge each other and the iPod charges. It says "connected to iTunes", but does nothing further. Once the screen saver blanks the screen, it simply shows "connect to iTunes" again, clearly part of the set-up process, when I re-activate the screen.
    In iTunes, the iPod Touch comes up under "Devices" at the left-hand side of the iTunes display, but I can't click on it to reveal anything about the iPod - nothing happens. At the same time, a progress bar appears at the tope of hte window saying, "accessing iTunes store" (I'm assuming this must be part of the set-up process?!), but it never completes. Sometimes, I get an error message telling me I have no active internet connection (the connection IS active, but I have also emailed my service provider in case this is relevent), but mostly it just hangs - in short, I can't do anything.
    I can't tell you which version of the iOS the iPod is running, because - you've guessed it - it will only run its set-up procedure, and that's not completing, so I can't find out anything about it...
    So disappointed, and very dispirited after spending days on this and getting nowhere. Apple has not responded to a service request thus far.
    Desperate to get this sorted out, because the whole point of finally getting an iPod (which everyone told me would be so simple to set up and use) is because I'm doing a really big charity walk in a couple of weeks - that, and the training walks, are really long (next one, tomorrow, is seven hours), and doing them without music is soul-destroying.
    If you can help, I'd be grateful beyond words.
    Thanks for reading,
    Sheri.

    Why do Apple not respond to correctly initiated support requests?
    This is taking weeks to fix on my own - that is *crazy* in this day and age. Here is an update. Sorry it's long, but it's in case it helps anyone else. I tried *everything*.
    What did it in the end was a tiny - REALLY tiny - thing, but I suspect it wouldn't have worked if not in combination with several other things.
    It's a setting in internet explorer, which I use rarely if ever, but a friend (i.e. a stroke of luck that he was around) pointed out that iTunes uses it in the background to work properly, and it's a security setting in the "Advanced" tab of the "Internet options" bit of IE. You need to UNtick the box for "Check server's certificate revocation". Which suggests that, before doing this, iTunes was going into an endless loop of checking. Not sure about that, but anyway - it worked in terms of getting the oPod recognised and set up (but see later in the post for the current situation). BUT... before that, I'd had to:-
    1. via my firewall, open two ports (80 and 443) needed by iTunes (I think this was key as well, actually - why on earth doesn't this sort of support come with the kit?)
    2. uninstall latest iTunes and revert to a previous version (may or may not have been necessary, but seemed logical especially as the iPod's iOS wouldn't be up-to-date) - that needed doing twice, as the first version I tried was *too* early for a 4th generation touch
    3. flush the resolver cache several times, and various other command-line actions
    4. try all connecting and communicating in different orders (e.g. trying to authenticate iTunes *first*, before connecting iPod) - but now I've seen the set-up process once through in its entirety, it's become *so* obvious that none of that was working, so it's partly my inexperience with iPods which made it take so long to find the solution
    5. try to set it up via the iTunes website instead (fail!)
    6. test secure site (https) access and inputting various server addresses to see if my firewall or mobile broadband provider was blocking them
    7. attempt connection with various parts of virus protection and firewall disabled, and even disable the entire firewall
    Not to mention endless emails and discussion forum contributions, reading and tweaking, all the re-boots...
    CURRENT SITUATION
    Lots of aspects working, but as soon as I ask the iPod to do anything internet related (use Safari, access App Store, etc - or even just sign in), it returns the message, "Cannot connect to iTunes store" - despite being connected by a cable to a computer which IS connected to the internet and IS running iTunes, IS accessing the store, HAS synced with and updated the iPod...
    Absolutely NOTHING in Apple "support" discussions/documents makes any difference, and is almost exclusively aimed at those connecting wirelessly anyway (so lots of stuff about routers, DNS settings, etc.); wireless is not an option oopen to me.
    Unbelievable.
    Any suggestions which don't just point me to an Apple support document would be very welcome, because I think I have read them all...

  • Whenever i try to download Adobe after effects it says installation failed and it does nothing PLEASE HELP ME

    I tried to install after effects but then it said installation failed and came up with this :
    Exit Code: 6 Please see specific errors below for troubleshooting. For example,  ERROR: DS012 ...   -------------------------------------- Summary --------------------------------------  - 0 fatal error(s), 7 error(s)    ----------- Payload: Adobe After Effects CC 2014 Presets 13.0.0.0 {B11629D3-E9EE-467B-B9C6-30D37E2A39CF} -----------  ERROR: DS012: LocalizeFile:Localized string not found for locale 'en_GB'(Seq 351)  ERROR: DS012: LocalizeFile:Localized string not found for locale 'en_GB'(Seq 683)  ERROR: DS012: LocalizeFile:Localized string not found for locale 'en_GB'(Seq 685)  ERROR: DS012: LocalizeFile:Localized string not found for locale 'en_GB'(Seq 687)  ERROR: DS012: LocalizeFile:Localized string not found for locale 'en_GB'(Seq 689)  ----------- Payload: Microsoft Visual C++ 2008 Redistributable Package (x86) 9.0.30729.5677 {539B5BB0-18F9-11E2-BBBC-00215AEA26C9} -----------  ERROR: Third party payload installer vcredist_x86.exe failed with exit code: 1603  ERROR: Failed to install Microsoft Visual C++ 2008 Redistributable Package (x86). Please try installing it by double clicking on the executable at "C:\Users\Aejeaz\AppData\Local\Temp\{907694F0-1B67-475C-8E74-2B81DF08E30B}\AfterEffects_13_LS20\Adobe After Effects CC 2014\payloads\Microsoft VC 2008 Redist (x86)\vcredist_x86.exe", or download and install the latest Microsoft Visual C++ 2008 Redistributable Package (x86) from Microsoft website - www.microsoft.com  -------------------------------------------------------------------------------------

    JazzGames please see Troubleshoot install issues with log files | CC - http://helpx.adobe.com/creative-cloud/kb/troubleshoot-install-logs-cc.html for information on how to locate and interpret your installation log files.  You are welcome to post any specific errors you discover to this discussion.

  • Solaris 10 install failing on Dell Server.  Please help

    Hello,
    Has anyone sucessfully installed Solaris 10 GA 03/05 on a Dell PowerEdge
    4400 with (2) 700Mhz Xeon processors. I am getting this error message
    and cannot resolve it:
    "I20 Nexus: Initializing IO Processor 0: FAILED". Any work around or
    any idea what this error message refers to?
    Thank you in advanced,

    Oh oh, I'll be trying to install Solaris 10 on a Poweredge 4400 tomorrow. I'll say you if I got the same problem.
    Best Regards,
    Octavio

  • Error compiling movie in Premiere and failed export in AME (CS6) - PLEASE HELP!!!

    Hi,
    I'm trying to export from my timeline which contains multiple mxf files shot with a canon xf105. i'm using cs6 on an apple mac and I never had this issue before:
    When I try to export to a quick time movie directly from Premiere I get this message after 5 seconds:
    When I send the video to AME I get this message including a sound of a sheep after 10 seconds:
    I have about 100 7 second clips that make up an 11 minute movie. I copy and pasted 4 clips (28 seconds) into a new sequence and tried to export it and it worked, both directly through premiere and through AME. Does that mean that premiere and AME can't handle so many clips? Or why is it showing me an error?
    I'm helpless and I need to finish this project very soon, I would be SO GRATEFUL for any help. Don't know what to do ..
    Thank you!

    Thank you John. I sat all night for about 8 hours on it and found out what caused the error. I had about 100 clips in my timeline that I was trying to export as one movie. Four clips caused the error. These four clips would playback perfectly in premiere, the whole timeline would render and everything seemed normal. Only after exporting 5 clips at a time I could see where the export would fail and show an error. At the end it was four clips, these four would playback fail to export, causing the entire sequence to fail.
    I have one question about this:
    1 How and why did this happen? Does that happen often with MXF files shot on a canon xf camera?
    2 How can I avoid this to happen again in the future?
    3 Isn't there a quicker way to find out which clips are causing a problem, rather than having to export each of them first to find out (which is a very annoying thing to do if you're literallt working with hundreds of clips)?
    Would be great if somebody has any insight for future reference!!!
    Thank you!

Maybe you are looking for