CIsco ASA 5510 fire wall problem

Hi,

Its simple, you have reboot with console connect, get into to ROM mode and change configuration registry so it will not load the saved configuration. Please refer Resetting the passwords on Cisco ASA 5510 Binary Royale Ltd for the step by step process

ASA's log is usualy stored localy on ASA itself, so easiest way to export that log is to go with telnet/ssh/console on it, do a command : show logging and copy/paste output into a new file.
but beware - this log is really short and as soon as ASA is rebooted - it's gone.
you could set asa to log to a syslog server (free on linux/freebsd or for windows use KIWI app).
that way all ASA log output is stored on pc/server running your syslog server.

Your best bet is to place the ASA into 'transparent' mode, and letting the traffic pass through it and be inspected on the way through.

To do this you need to first do the following command:
firewall transparent

Once in transparent mode, the firewall will no longer look like a hop in the packets journey, and you can set rules to allow/disallow traffic using access lists on the inside and outside interfaces, plus you can perform packet inspections using policy-map and inspects.

Hope that helps!

All websites or specific ones?

If you want to block all web traffic, a straightforward rule preventing HTTP traffic (TCP port 80) as well as HTTPS (port 443) will block any and all web access.

If you just want to block specific sites, I'd recommend an access control list (ACL) configured to deny traffic to those specific site's IP addresses.

connect your laptop to the asa5510 using a cross over cable

Yes. The firewall will restart. Just be sure to save your running config to memory before turning off. For that you must issue the command: write memory.

Best Regards,
T

Hello kuniksh,

Look at the below link for all configurations
http://www.akadia.com/services/cisco_router_firewall.html


Do rate this solution!!!!

Hello ,
the Steps which u want to export and import configuration in Cisco ASA5510
1- connect yourself to your Cisco gateway by IP
2- Get TFTP server to your PC like( solarwind , Tftp server , ... ) any tftp download and upload program
3- now u need to copy running configuration to your pc by order
#copy run tftp , then follow the steps
NOTE: u should be in the same network or u need your pc and cisco box both have publick IP

4- if u want to put prepair config files to your gateway , you will need to type order
#copy tftp run , then foloow the steps

If u need anything else please let us know by leave your completely request or join us with www.fixya.com

Regards,
Samer

This is for the pixes, I haven't upgraded an asa yet...should be close or the same

* find latest version of code, these are usually *.bin files located on http://www.cisco.com/cgi-bin/tablebuild.pl/pix
* confirm the flash and RAM requirements of the PIX OS software versus what the PIX has (”sho ver”)
* make sure you have a backup of the old PIX OS and PDM to the tftp server (or at least confirm the software is there)
Note: You cannot back them up from the PIX, so you will need to download them and put them on the tftp server * put in a change control form
* once change controls confirms date/time do the upgrade:
wri mem*** only if you save your configs via tftp wri net conf t ca save all copy tftp://your tftp server ip/pix635.bin flash:imageskip this if you don't use pdm copy tftp://your tftp server ip/pdm-304.bin flash:pdm *** if this is a failover pair, upgrade the other pair reboot

If you can't get the manament working initially I suggest the following

Setup a console connection
Type "enable" and press enter to access priveleged exec mode on the ASA
Type "config terminal" and press enter to access configuration mode
Type "configure factory-default" and press enter to load default settings.
Assign a static IP to your PC of 192.168.1.5 and try to browse to https://192.168.1.1 (PC is plugged into management interface)

You should be prompted to begin using ASDM