This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Site2Site UTM9.2 to Cisco ASA

I am evaluating a UTM220. I have the site2site up and running except I'm not able to ping either side. Last year I evaluated a UTM120 and had the same issue not able to ping either side. Sophos made some changes on the 120 that made it work, but I cannot remember what it was. The Cisco ASA has not been changed so I have to say it is on the UTM side. I have the remote and local subnets setup. The IPSEC and ISAKMP have been established. On the UTM side, everything is forced through the remote gateway. So when someone on the UTM side goes to the internet it goes through the ASA and out to the internet. I just wish I could remember what was done on the previous firewall. Could anyone help me out please?

Thanks

This thread was automatically locked due to age.

0 BarryG over 10 years ago

Hi,

Do you have ICMP / pings allowed on the Firewall->ICMP tab?

If you already do, check the firewall and IPS logs.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 tdilley@gonpl.com over 10 years ago

Yes, ICMP is enabled. IPS is not enabled. The firewall log is denying traffic from what I think is the cable modem, but it is IGMP traffic which should not matter.
Cancel
Vote Up 0 Vote Down

Cancel
0 tdilley@gonpl.com over 10 years ago

This is why it will be hard to buy this product for 50 sites. There just does not seem to be enough help/knowledge from either the community or Sophos tech support.
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 10 years ago

Hi,

If the UTM is not dropping the pings, then you either have a routing problem (presumably you do not because everything else is working),
OR something on the Cisco end is dropping them.

You need to run a sniffer on both ends.
(tcpdump is available on the UTM console/shell)

And check the logs on the other end (ASA, inside routers).

Barry
Cancel
Vote Up 0 Vote Down

Cancel