New ASA Device

Hello,
We have a new ASA box configured and one of the user is using his IPad to connect to it.
It is asking for secret password while he trys to connect it.
Arun

Hi Marvin,
I am attaching the running config.
The user is from the group MDW(You can see it in the config).
=====================================================================================
sh run
: Saved
ASA Version 8.2(5)
hostname nmtasav001
domain-name internal.XXX.com
enable password xxx encrypted
passwd xxx encrypted
names
name 10.4.5.5 NetflowAnalyzer
name 10.4.5.6 Challenger
name 10.4.237.0 Net-10.4.237.0 description ASA Client VPN
name xxx Net-xxx description Hosting
name 10.4.4.50 mtcdnsw001
name 10.4.4.51 mtcdnsw002
name xxx nmtasav001-outside
name 172.16.0.0 Net-172.16.0.0
name 192.168.0.0 Net-192.168.0.0
interface GigabitEthernet0/0
nameif INSIDE
security-level 100
ip address 10.4.1.20 255.255.255.224
interface GigabitEthernet0/1
nameif OUTSIDE
security-level 0
ip address nmtasav001-outside 255.255.255.0
interface GigabitEthernet0/2
nameif lab
security-level 100
ip address 192.168.105.193 255.255.254.0
interface GigabitEthernet0/3
no nameif
no security-level
no ip address
interface Management0/0
nameif management
security-level 100
ip address 192.168.1.1 255.255.255.0
management-only
ftp mode passive
clock timezone EST -5
clock summer-time EDT recurring
dns domain-lookup INSIDE
dns server-group DefaultDNS
name-server mtcdnsw001
name-server mtcdnsw002
domain-name internal.xxx
same-security-traffic permit inter-interface
same-security-traffic permit intra-interface
object-group network obj-SSL-pool
network-object 10.2.31.0 255.255.255.0
object-group network obj-inside-LAN
network-object 10.4.1.0 255.255.255.224
object-group network INTERNAL-DNS
network-object host mtcdnsw001
network-object host mtcdnsw002
object-group network Net-PrivateRFC1918
network-object 10.0.0.0 255.0.0.0
network-object Net-172.16.0.0 255.240.0.0
network-object Net-192.168.0.0 255.255.0.0
access-list mngmt-in extended permit ip any any
access-list INSIDE_nat0_outbound extended permit ip any 192.168.105.194 255.255.255.254
access-list INSIDE_nat0_outbound extended permit ip any 10.2.31.0 255.255.255.0
access-list no_nat extended permit ip 10.2.31.0 255.255.255.0 10.0.0.0 255.0.0.0
access-list no_nat extended permit ip any 10.0.0.0 255.255.255.0
access-list tcp_bypass extended permit tcp host 10.4.4.38 any
access-list DAP-Test extended deny ip 10.2.31.0 255.255.255.0 host Challenger
access-list MDW-Contractors extended permit ip Net-10.4.237.0 255.255.255.0 Net-xxx 255.255.224.0
access-list MDW-Contractors extended permit udp Net-10.4.237.0 255.255.255.0 object-group INTERNAL-DNS eq domain
access-list MDW-Contractors extended deny ip any object-group Net-PrivateRFC1918
access-list MDW-Contractors extended permit ip Net-10.4.237.0 255.255.255.0 any
access-list MDW-ST-TEST extended permit ip any any inactive
access-list MDW-ST-TEST2 standard permit host xxx
pager lines 24
logging enable
logging asdm informational
flow-export destination INSIDE NetflowAnalyzer 2055
mtu INSIDE 1500
mtu OUTSIDE 1500
mtu lab 1500
mtu management 1500
ip local pool IPPool 192.168.105.194-192.168.105.195 mask 255.255.254.0
ip local pool TestPool 10.0.0.1-10.0.0.254 mask 255.255.255.0
ip local pool OUTSIDE-TEST 10.2.31.2-10.2.31.254 mask 255.255.255.0
ip local pool MDW-Contractors 10.4.237.206-10.4.237.210 mask 255.255.255.0
no failover
icmp unreachable rate-limit 1 burst-size 1
no asdm history enable
arp timeout 14400
global (OUTSIDE) 1 interface
nat (INSIDE) 0 access-list no_nat
nat (OUTSIDE) 1 Net-10.4.237.0 255.255.255.0
access-group mngmt-in in interface management
route OUTSIDE 0.0.0.0 0.0.0.0 xxx 1
route INSIDE 10.0.0.0 255.0.0.0 10.4.1.4 1
route INSIDE Net-172.16.0.0 255.240.0.0 10.4.1.4 1
route INSIDE Net-192.168.0.0 255.255.0.0 10.4.1.4 1
route INSIDE Net-xxx 255.255.224.0 10.4.1.4 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
user-message "Default Success"
dynamic-access-policy-record Employees
user-message "Employees DAP Good"
network-acl DAP-Test
aaa-server Internal_LDAP protocol nt
aaa-server Internal_LDAP (INSIDE) host 10.4.4.40
nt-auth-domain-controller 10.4.4.40
aaa-server CryptoCard protocol radius
aaa-server CryptoCard (INSIDE) host 10.4.5.1
key *****
authentication-port 1812
accounting-port 1813
aaa-server INTERNAL_AD protocol nt
aaa-server INTERNAL_AD (INSIDE) host 10.4.4.40
nt-auth-domain-controller 10.4.4.40
aaa-server AD_LDAP protocol ldap
aaa-server AD_LDAP (INSIDE) host 10.4.4.38
server-port 389
ldap-base-dn ou=xxx,dc=internal,dc=xxx,dc=com
ldap-group-base-dn ou=xxx,dc=internal,dc=xxx,dc=xxx
ldap-scope subtree
ldap-naming-attribute sAMAccountName
ldap-login-password *****
ldap-login-dn ldapquery@xxx
server-type microsoft
aaa-server BlackShield protocol radius
aaa-server BlackShield (INSIDE) host 10.4.4.253
key *****
authentication-port 1812
accounting-port 1813
aaa-server BlackShield (INSIDE) host 10.4.4.254
key *****
authentication-port 1812
<--- More --->
accounting-port 1813
aaa-server Hosting-LDAP protocol ldap
aaa-server Hosting-LDAP (INSIDE) host xxx
server-port 636
ldap-base-dn ou=People,dc=xxx,dc=xxx
ldap-scope subtree
ldap-naming-attribute uid
ldap-login-password *****
ldap-login-dn cn=VPN,ou=Auth Accounts,dc=xxx,dc=xxx
ldap-over-ssl enable
aaa authentication ssh console LOCAL
http server enable
http 192.168.1.0 255.255.255.0 management
http 192.168.105.192 255.255.255.255 lab
http Challenger 255.255.255.255 lab
http 10.0.0.0 255.0.0.0 lab
http 10.0.0.0 255.0.0.0 INSIDE
http Net-192.168.0.0 255.255.0.0 INSIDE
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec transform-set ESP-AES-256-MD5 esp-aes-256 esp-md5-hmac
crypto ipsec transform-set ESP-DES-SHA esp-des esp-sha-hmac
crypto ipsec transform-set ESP-DES-MD5 esp-des esp-md5-hmac
crypto ipsec transform-set ESP-AES-192-MD5 esp-aes-192 esp-md5-hmac
crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec transform-set ESP-AES-256-SHA esp-aes-256 esp-sha-hmac
crypto ipsec transform-set ESP-AES-128-SHA esp-aes esp-sha-hmac
crypto ipsec transform-set ESP-AES-192-SHA esp-aes-192 esp-sha-hmac
crypto ipsec transform-set ESP-AES-128-MD5 esp-aes esp-md5-hmac
crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
crypto dynamic-map SYSTEM_DEFAULT_CRYPTO_MAP 65535 set transform-set ESP-AES-128-SHA ESP-AES-128-MD5 ESP-AES-192-SHA ESP-AES-192-MD5 ESP-AES-256-SHA ESP-AES-256-MD5 ESP-3DES-SHA ESP-3DES-MD5 ESP-DES-SHA ESP-DES-MD5
crypto map lab_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
crypto map lab_map interface lab
crypto map OUTSIDE_map 65535 ipsec-isakmp dynamic SYSTEM_DEFAULT_CRYPTO_MAP
crypto map OUTSIDE_map interface OUTSIDE
crypto ca trustpoint ASDM_TrustPoint0
enrollment self
subject-name CN=nmtasav001
crl configure
crypto ca certificate chain ASDM_TrustPoint0
certificate 17ffe14e
    308201d7 30820140 a0030201 02020417 ffe14e30 0d06092a 864886f7 0d010105
    05003030 31133011 06035504 03130a6e 6d746173 61763030 31311930 1706092a
    864886f7 0d010902 160a6e6d 74617361 76303031 301e170d 31313132 30393132
    34363231 5a170d32 31313230 36313234 3632315a 30303113 30110603 55040313
    0a6e6d74 61736176 30303131 19301706 092a8648 86f70d01 0902160a 6e6d7461
    73617630 30313081 9f300d06 092a8648 86f70d01 01010500 03818d00 30818902
    8181009a 6917bd8f e740f061 92d7a6fe 93407ac8 0449a07d 65da57c8 ce4954d4
    2260f2b5 ab4df14c 5ad4c326 83a5d44f 61c1fcf1 4b297cfd 99b5d476 1c448acf
    1939e5aa 8b994aba 4a6cd5ee dc9add18 92677696 773d581c 3b8bc39b 3257c32c
    cf1288d2 9a2addce 76b3fd5c 90207513 c4f2c662 771dfbe7 4b6ce8a3 5ec886a4
    3ec27d02 03010001 300d0609 2a864886 f70d0101 05050003 8181008e 36d02573
    df2277dd d0902fa8 83b6efb1 183c3df1 2d305cd8 c3eb6c15 f21534e1 12252077
    f9d92978 7477cd70 b0e5cf6a db9401ea b02b1ece ace0ed55 7b84bddc cb86e9af
    306c1033 ed52c294 ea59a284 0e6f63e6 d1c6f3c8 ace8b8ba 158e38a1 2923cbc2
    27895b29 549ce80a 66170c58 b4e493d5 879c44d5 860ed20d 96d05d
quit
crypto isakmp enable OUTSIDE
crypto isakmp enable lab
crypto isakmp policy 10
authentication rsa-sig
encryption 3des
hash sha
group 2
lifetime 86400
crypto isakmp policy 30
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
telnet timeout 5
ssh 10.0.0.0 255.0.0.0 INSIDE
ssh Net-192.168.0.0 255.255.0.0 INSIDE
ssh 10.0.0.0 255.0.0.0 lab
ssh Net-192.168.0.0 255.255.0.0 lab
ssh Challenger 255.255.255.255 lab
ssh timeout 5
console timeout 0
dhcpd address 192.168.1.2-192.168.1.254 management
dhcpd enable management
threat-detection basic-threat
threat-detection statistics access-list
no threat-detection statistics tcp-intercept
ntp server 10.4.4.35 source INSIDE prefer
ssl trust-point ASDM_TrustPoint0 lab
webvpn
enable OUTSIDE
csd image disk0:/csd_3.5.841-k9.pkg
svc image disk0:/anyconnect-win-2.4.1012-k9.pkg 1
svc image disk0:/anyconnect-linux-2.4.1012-k9.pkg 2
svc image disk0:/anyconnect-macosx-powerpc-2.3.2016-k9.pkg 3
svc image disk0:/anyconnect-macosx-i386-2.4.1012-k9.pkg 4
svc image disk0:/anyconnect-win-2.5.3055-k9.pkg 5
svc enable
group-policy RSA-TEST internal
group-policy RSA-TEST attributes
dns-server value 10.4.4.50 10.4.4.51
vpn-tunnel-protocol IPSec
default-domain value internal.xxx
group-policy DfltGrpPolicy attributes
dns-server value 10.4.4.50 10.4.4.51
vpn-tunnel-protocol IPSec l2tp-ipsec svc webvpn
default-domain value internal.xxx
group-policy GroupPolicy4 internal
group-policy GroupPolicy4 attributes
wins-server none
dns-server value 10.4.4.50 10.4.4.51
vpn-filter value MDW-Contractors
vpn-tunnel-protocol svc
default-domain value internal.xxx
group-policy GroupPolicy3 internal
group-policy GroupPolicy3 attributes
wins-server none
dns-server value 10.4.4.50 10.4.4.51
vpn-tunnel-protocol svc
default-domain value internal.xxx
group-policy GroupPolicy2 internal
group-policy GroupPolicy2 attributes
wins-server none
dns-server value 10.4.4.50 10.4.4.51
vpn-tunnel-protocol svc
default-domain value internal.xxx
group-policy GroupPolicy1 internal
group-policy GroupPolicy1 attributes
wins-server none
dns-server value 10.4.4.50 10.4.4.51
vpn-tunnel-protocol svc
default-domain value internal.xxx
group-policy EmployeeGrpPolicy internal
group-policy EmployeeGrpPolicy attributes
wins-server none
dns-server value 10.4.4.50 10.4.4.51
vpn-tunnel-protocol svc webvpn
default-domain value internal.xxx
webvpn
url-list value Challenger
group-policy OUTSIDE-REMOTEACCESS internal
group-policy OUTSIDE-REMOTEACCESS attributes
dns-server value 10.4.4.50 10.4.4.51
vpn-tunnel-protocol IPSec svc
default-domain value internal.xxx
username user1 password spqkEUN2dW2Uq2B3 encrypted
username user2 password CiPqkZGHO77wSa/e encrypted privilege 0
username user2 attributes
vpn-group-policy RSA-TEST
username xxx password xxx encrypted
username neteng password xxx encrypted privilege 15
username neteng attributes
service-type remote-access
tunnel-group DefaultWEBVPNGroup general-attributes
address-pool OUTSIDE-TEST
authentication-server-group INTERNAL_AD
secondary-authentication-server-group CryptoCard use-primary-username
tunnel-group CompanyOwnedComputer type remote-access
tunnel-group CompanyOwnedComputer general-attributes
address-pool OUTSIDE-TEST
authentication-server-group INTERNAL_AD
secondary-authentication-server-group BlackShield use-primary-username
default-group-policy EmployeeGrpPolicy
tunnel-group CompanyOwnedComputer webvpn-attributes
group-url https://xxx/employees enable
tunnel-group MDW type remote-access
tunnel-group MDW general-attributes
address-pool MDW-Contractors
authentication-server-group Hosting-LDAP
authorization-server-group Hosting-LDAP
default-group-policy GroupPolicy4
tunnel-group MDW webvpn-attributes
group-url https://xxx/mdw enable
tunnel-group OUTSIDE-REMOTEACCESS type remote-access
tunnel-group OUTSIDE-REMOTEACCESS general-attributes
address-pool OUTSIDE-TEST
default-group-policy OUTSIDE-REMOTEACCESS
tunnel-group OUTSIDE-REMOTEACCESS ipsec-attributes
trust-point ASDM_TrustPoint0
tunnel-group RSA-TEST type remote-access
tunnel-group RSA-TEST general-attributes
address-pool TestPool
default-group-policy RSA-TEST
tunnel-group RSA-TEST ipsec-attributes
pre-shared-key *****
tunnel-group TunnelGroup1 type remote-access
tunnel-group TunnelGroup1 general-attributes
authentication-server-group (INSIDE) Internal_LDAP
default-group-policy GroupPolicy2
class-map inspection_default
match default-inspection-traffic
class-map tcp_bypass
description "TCP traffic that bypasses stateful firewall"
match access-list tcp_bypass
policy-map type inspect dns preset_dns_map
parameters
message-length maximum client auto
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect esmtp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect sip
inspect netbios
inspect tftp
inspect ip-options
policy-map tcp_bypass_policy
class tcp_bypass
set connection advanced-options tcp-state-bypass
service-policy global_policy global
service-policy tcp_bypass_policy interface INSIDE
prompt hostname context
no call-home reporting anonymous
Cryptochecksum:8ebf55bf0eac5187d701d62352d57e6f
: end
nmtasav001#

Similar Messages

Causing some network problem after connecting the new ASA to my network

Hi everyone,
Hope you can help on this issue.... It is strange to me...but may not be to you
Currently, I have a subnet connects to my primary network. All the internet travel thru a router there in turn thru a pair of ASA failover firewall (ie Subet -> router -> Subnet ASA -> Pirmary network ASA -> Primary network router -> Internet).
Now we try to setup a internet pipe so the subnet can go to internet by its own. So...for security purpose, we put another new ASA in between.the subnet and the new internet. This will be the first, and the old path to Interent would be the back up route.
NOW
I have not even make any route cahgnes on the router yet. What I did was to connect the new ASA to the subnet. Again, I do not change any routes, or any gateway settings on all the computers yet in the subnet!! I just connect the asa. That is it...please remember this.
However, problem happens. I have a application server in the same subnet.... that keeps kick out users. I also have continuous ping to it... I saw that the server has requesdted time out...it did not come back up until about 10 to 20 seconds later. The server, in fact, is a cluster server. Although I can ping the physical server, I cannot ping the virutal server.
In order to fix the problem, I really need to unplug the new ASA from the network, and reload the cluster server. Then it starts to work.
ANother symptom is that...people complaint the log on is obviously slower than usual.
May I ask why the new ASA will cuase this trouble?? Again, no routes on the router have been change. And all PCs in the subnet are still using old gateway, and did not nkow about the new ASA.
Any ideas would be great!! Very strange to me. Thank you very much for your help.
Riderfaiz

First guest would be proxy ARP.
Proxy ARP is enabled by default on the ASA. The new ASA might be proxy ARPing for whatever reason.
OR the new ASA might have been configured with an ip address that belongs to another device by mistake.

ASDM not working on new ASA

Hi Everyone,
I am setting up new ASA for testing purposes.
So far it has single interface Active which is management.
I can ssh to ASA fine but ASDM is not working.
sh run http shows
sh run http
http server enable
http 172.31.20.0 255.255.255.0 management
sh run ssh
ssh 172.31.20.0 255.255.255.0 management.
Regards
MAhesh

Hi Julio,
sh run ssl foed not sjow any output
show flash | include asdm
111 16280544    Jun 29 2011 12:10:58 asdm-645.bin
sh run asdm
no asdm history enable
sh ver shows
up 2 days 2 hours
Hardware:   ASA5520, 2048 MB RAM, CPU Pentium 4 Celeron 2000 MHz
Internal ATA Compact Flash, 256MB
BIOS Flash M50FW016 @ 0xfff00000, 2048KB
Encryption hardware device : Cisco ASA-55x0 on-board accelerator (revision 0x0)
                             Boot microcode        : CN1000-MC-BOOT-2.00
                             SSL/IKE microcode     : CNLite-MC-SSLm-PLUS-2.03
                             IPSec microcode       : CNlite-MC-IPSECm-MAIN-2.06
                             Number of accelerators: 1
0: Ext: GigabitEthernet0/0 : address is e8b7.483d.0d68, irq 9
1: Ext: GigabitEthernet0/1 : address is e8b7.483d.0d69, irq 9
2: Ext: GigabitEthernet0/2 : address is e8b7.483d.0d6a, irq 9
3: Ext: GigabitEthernet0/3 : address is e8b7.483d.0d6b, irq 9
4: Ext: Management0/0       : address is e8b7.483d.0d6c, irq 11
5: Int: Not used            : irq 11
6: Int: Not used            : irq 5
Licensed features for this platform:
Maximum Physical Interfaces       : Unlimited      perpetual
Maximum VLANs                     : 150            perpetual
Inside Hosts                      : Unlimited      perpetual
Failover                          : Active/Active perpetual
VPN-DES                           : Enabled        perpetual
VPN-3DES-AES                      : Enabled        perpetual
Security Contexts                 : 2              perpetual
GTP/GPRS                          : Disabled       perpetual
AnyConnect Premium Peers          : 2              perpetual
AnyConnect Essentials             : Disabled       perpetual
Other VPN Peers                   : 750            perpetual
Total VPN Peers                   : 750            perpetual
Shared License                    : Disabled       perpetual
AnyConnect for Mobile             : Disabled       perpetual
AnyConnect for Cisco VPN Phone    : Disabled       perpetual
Advanced Endpoint Assessment      : Disabled       perpetual
UC Phone Proxy Sessions           : 2              perpetual
Total UC Proxy Sessions           : 2              perpetual
Botnet Traffic Filter             : Disabled       perpetual
Intercompany Media Engine         : Disabled       perpetual
This platform has an ASA 5520 VPN Plus license.
Regards
MAhesh

Upgrade from 8.2 to 8.6 for new ASA 5515X

Hello,
My customer has a rather complex configuration on an ASA 5510 running version 8.2
They are migrating to new ASA 5515X models which of course only version support 8.6
How can i convert the configuration from 8.2 to 8.6 since the new ASA's do not support the earlier versions?
The X series seems to be a great option for new deployments but what about replacements of existing older models?
Thanks for any ideas everyone!
Chris

Hello,
I would say go to 8.4 From there you will have the same syntax.
There will be new commands and features on 8.6... That for sure but you are going to be on the same path.
Any other question..Sure ..Just remember to rate all of the helpul posts
Julio

Azure multiple site-to-site VPNs (dynamic gateway) with Cisco ASA devices

Hello
I've been experimenting with moving certain on-premise servers to Azure however they would need a site-to-site VPN link to our many branch sites e.g. monitoring of nodes.
The documentation says I need to configure a dynamic gateway to have multiple site-to-site VPNs. This is not a problem for our typical Cisco ISR's. However three of our key sites use Cisco ASA devices which are listed as 'Not Compatible' with dynamic routing.
So I am stuck...
What options are available to me? Is there any sort of tweak-configuration to make a Cisco ASA work with Azure and dynamic routing?
I was hoping Azure's VPN solution would be very flexible.
Thanks

Hello RTF_Admin,
1. Which is the Series of CISCO ASA device you are using?
Thank you for your interest in Windows Azure. The Dynamic routing is not supported for the Cisco ASA family of devices.
Unfortunately, a dynamic routing VPN gateway is required for Multi-Site VPN, VNet to VNet, and Point-to-Site.
However, you should be able to setup a site-to-site VPN with Cisco ASA 5505 series security appliance as demonstrated in this blog:
Step-By-Step: Create a Site-to-Site VPN between your network and Azure
http://blogs.technet.com/b/canitpro/archive/2013/10/09/step-by-step-create-a-site-to-site-vpn-between-your-network-and-azure.aspx
You can refer to this article for Cisco ASA templates for Static routing:
http://msdn.microsoft.com/en-us/library/azure/dn133793.aspx
If your requirement is only for Multi-Site VPN then there is no option but to upgrade the device as Multisite VPN requires dyanmic routing and unfortunately there is no tweak or workaround due to hardware compatibility issue.
I hope that this information is helpful
Thanks,
Syed Irfan Hussain

I just wanna buy a new iOS device and I'm confused between the iPod touch 5th generation, iPhone 4s 8GB, iPad 4th generation 16GB and iPad mini with the retina display 16GB model. Please help me figure out.

I have an iPhone 4s 16GB Model and I've been using it for about more than an year now. The reason I wanna get a new iOS device is because my 4s has got lots of scratches now and it's ambient light sensor seems not to work properly. Apparently, another reason is that the iLife and iWork suit are not free for me as my device is older and new devices get those softwares for free.
I thought to go with a new iPhone 4s again but the problem is that new 4s come with only 8GB of storage and they don't support AirDrop. So next, I thought to go with an iPod touch 5th gen because of its jaw-dropping design, bigger screen, more storage and AirDrop support. Because iPod touch is phone-less iPhone and they come at affordable price, I can also buy any cheap cell phone like moto e to replace my current iPhone 4S.
Another options that I thought a little bit on, is iPad 4th Gen and iPad mini with Retina display 16GB.
Now, should I just stick with my current 16GB iPhone 4s, or get a new one.
Or should I buy an iPod touch 5th gen and moto e (since iPod can't make phone calls)
Or should I go with one of the two iPad models that I aforementioned.
Awaiting your valuable suggestions.
Thank you!

Found one on best buy
http://www.bestbuy.com/site/Belkin+-+Grip+Neon+Glo+Case+for+Apple%26%23174%3B+iP od%26%23174%3B+touch+5th+Generation+-+Pink/1331013.p?id=1219050712926&skuId=1331 013
by Belkin, so a place to start.
They're a lot more expensive, but Griffin has some of their 'survivor' cases with sealed ports, so you could cover up the ones you don't need.
If best buy isn't an option for you, at least there's a manufacturer to look for.

HT201272 How can I recover a purchased app on one itouch (which has since died) and put it on my new itouch device if I haven't syncronised my old device with my mac/itunes account before it died?

How can I recover a purchased app on one itouch (which has since died) and put it on my new itouch device if I haven't syncronised my old device with my mac/itunes account before it died?

It is easy to download items you have purchased from iTunes again; this article will walk you through it: http://support.apple.com/kb/HT2519
You want the "Apps on iOS" section.

Add a New Blackberry Device Screen

The Add a New Blackberry Device screen stays open with the green wait circle spinning around and around while it says initializing your device. Why won't it sync?

Delivery Time Maintenance
Requested Delivery From     00:00:00
Requested Delivery To     00:00:00
                     OK
I need a subscreen like above

Email messages from my personal email account are being posted (copied) to SMS messages. I have a new cell device, and this is happening on the new device also. The copy/forward to SMS is NOT being initiated by my email provider. How do I end this?

Email messages from my personal email account are being posted (copied) to SMS messages. I have a new cell device (swtched from Droid to iPhone) and this is happening on the new device also. The copy/forward to SMS is NOT being initiated by my email provider, and not by Gmail. How do I end ûVerizon's forwarding my personal email to SMS?
Thanks.

Maybe I'm missing something but how can Verizon have control over your personal GMail account? Sounds like you do have your email set up to forward to sms.
I have certain emails that are forwarded to me as SMS but that is an option that is enabled on the email side of things and is independent from Verizon.

How do I download iLife on my MacBook Pro (for free) after purchasing a new iOS device

Hello,
I watched the most recent keynote address just like everybody else and was very happy to hear that Apple was going to provide the new iLife and iWork software for free with the purchase of a new Mac device or iOS device. So, I went and purchased a new iPhone 5S. Now how do I get my free copy of this software on my MacBook Pro (Mid-2010) running Mavericks?
Any help would be appreciated.
Thanks,
Marcus

You must be running Mavericks and have purchased the iLife 11 apps, either they came with the Mac or from a purchased iLIfe 11 disk, in order to upgrade to iPhoto 9.5 for free.
The following came from this MacWorld article: What you need to know about Apple's free apps policy | Macworld
If you own iLife '11 or iWork ’09 apps (or v1 iOS apps) and you got them from the Mac App Store or iOS App Store: You should be able to download the latest versions for free by going to the app page on the Mac or iOS App Store.
If you own iLife '11 or iWork ’09 apps for the Mac but did not purchase them from the Mac App Store: You should be able to download the latest versions for free by going to the Mac App Store and tapping Update, though you may need to first visit the Purchases screen, where you might see a box called “You Have [number] Apps to Accept.” This ties apps you have on your computer to both your Apple ID and a hardware identifier on your computer, and it should allow you to download free updates to these programs from any computer associated with your Apple ID.
Some users (including yours truly) are reporting issues where the Mac App Store doesn’t recognize their copies; when they click on an iLife or iWork app’s price, they receive the following alert: “[App] is already installed and was not purchased from the Mac App Store. Do you want to buy [app]?” Macworld spoke with an Apple spokesperson who noted that there’s currently an issue with some legacy customers, and the company is working on a fix. That fix appears to have been implemented; on Thursday, several users told Macworld that they were getting the Accept Apps prompt.
If you don’t own iLife '11 or iWork ’09 apps (or v1 iOS apps), or own older Mac versions: On the iLife side, you’ll have to buy iMovie and iPhoto at full price ($15 or $5, depending on platform). GarageBand is free for everyone to download, though the app does offer in-app purchases. Apple’s iWork apps are each $20 for the Mac, $10 on the iPhone or iPad.
OT

I have a device that shows up in my airplay device list on my iMac, and my phone. This device does not exist. How do I get it out of the list? I would like to drop it before I add new airplay devices to my network.

I have a device that shows up in my airplay device list in iTunes, and on my iPhone that does not exist. How do I delete it? I have OS X 10.10.1 on my iMac, and iOS 8.1.2 on my iPhone 5. I would like to get it out before I add new airplay devices to my network.

I called Apple tech support. The device turns out to be a WiFi extender. I never would have guessed that the extender would show up on the list since I wouldn't think of it as an airplay device, and in the list, it shows a little speaker icon. In the process of talking with Apple, I gained a greater understanding of how airplay works.
It turns out that there is no stored list of devices in a file on the mac, or anywhere else. I have seen a lot of traffic on the web from people trying to modify this list, but there isn't one. iTunes, and other devices simply poll the network for airplay devices from time to time.
Have a very happy holiday!
I would like to get rid of "just give me the aster, and stop wasting my time", and replace it with my name. The Apple tech support guy never saw that before. Just my luck.

ODD on my Satellite L550-11J is damaged - looking for new suitable device

hello,
the dvr device of my toshiba satellite L550-11J (bought in 2009) with windows vista 64 seems to be broken. it is a "pioneer dvd-rw dvrtd09a". it doesn`t show on windows anymore, not in the explorer, not in the device manager (if this s the english name of it, i don`t know, i am german speaking). it doesn`t even show in the bios or boot device, so i think it is not a software problem but the hardware is broken.
which new dvr device is suitable for my notebook? i cannot find the same dvr device on amazon or elsewhere to buy, so i guess i need another one that suits.please help.
best wishes
no-idea

addendum:
sometimes, the dvr device is back for a little while, but 90% of the time it is not recognized. i guess it has a defective contact. i already took it out, blew into it and but it back in. no result. it has power and it can be opened and closed. cd`s that are put in are turning for a few seconds, than it stops.
when the device is gone, it cannot be found in the bios!!!

Msg: You've connected a new Blackberry device, it's been initializing device for over 1 hour

I had Blackberry Desktop Manager Ver 5.x installed. I downloaded the BlackBerry Desktop Software v6.1 software from the link saying that this download was to upgrade existing desktop manager. The installation completed without issues. After starting Version 6.1 for the first time and being asked to connect a blackberry device, I connected my brand new Blackberry Bold 9930. A new window opened that said "You've connected a new BlackBerry device" "Initializing device", and it's been hanging like that for nearly 2 hours. The main window shows the Blackberry correctly seen by model, type and pin and as never synced and never backed up. Any help would be greatly appreciated. Thanks, Bruce

Although this is advertised as an upgrade to Desktop Manager 5.x, it is really a replacement. It does not upgrade anything, but merely installs the new one. So the first thing you may want to make sure of is whether the old version is still on the computer. Go to your Control Panel on your computer and click Programs and Features. If you see any other BlackBerry Desktop Sfotware version beside the 6.1 then uninstall it. This other version could still be attempting to communicate with your device, causing this issue to occur. Make sure you reboot your computer after this is done. let me know if this helps or if you need any more help.

Unable to use Internet Connect with my new wireless device

I just received a new wireless device for my macbook pro. Normally I sign on with Internet Connect, but after setting up the new card, I can only connect using Verizon Manager, which usually doesn't give me good connection, I don't know why.
I called the Verizon people, they mostly are clueless as to how I was able to sign on using both Internet Connect and Verizon Manager before with my old card. I remember there's a way of setting up manually if you want to use Internet Connect. Problem is, when I went to Systems Preferences and clicked on Network, a pop up prompt saying "your network setting have been changed by another application" keeps popping up even as I keep closing it. ***?!!! How can I get rid of it so I can change network setting manually?
I just want the option of connecting with Internet Connect with my new wireless device. BTW, when I try connecting with it using my old setting National access/ Broadband access , I get a message saying "the selected communication device does not exist".

"I just received a new wireless device"
If not from Verizon, then who? Did it come w/a manual? If not, have you contacted the vendor/manufacturer for instructions?
==========
"A Fix for "Your network preferences have been changed by another application" Error
In the Library/Preferences/SystemConfiguration/ folder delete the following:
com.apple.airport.preferences.plist
NetworkInterfaces.plist
preferences.plist
com.apple.nat.plist
You will have to re-configure all your network settings since deleting"
!http://i50.tinypic.com/izvwo1.gif!

HT201269 Hi, I have just changed contract and phone and wish to transfer the content of my iphone 4 to my new phone device which is not and I-product. When I attempt to sign into i-tune to transfer the item to dropbox, i am unable to sign into i-tune. H

Hi, I have just changed contract and phone and wish to transfer the content of my iphone 4 to my new phone device which is not and I-product. When I attempt to sign into i-tune to transfer the item to dropbox, i am unable to sign into i-tune. Help pls.

Hi, Kilted, I shall put it as below:
Cancelled a contract on my Iphone and started another contract with Samsung Note 2 on O2. Managed to transfer almost all my data bar the content of my notes through drag and drop from itune to sKies prior to contract cancellation.
When I later connected the iphone to the laptop to carry out an advise of going into itune to drag and drop the note content into dropbox from where I could pull into the samsung device, I was denied access into itune with my id , the same which has facilitated my access to this chat community.
Question then: Am I not able to use itune again because of the contract cancellation?

New ASA Device

Similar Messages

Maybe you are looking for