Solved

PIX 501 Internet periodically not available. PIX licenses exceeded?

Posted on 2006-10-25
2
1,083 Views
Last Modified: 2011-09-20
I have a PIX 501 with more than 10 machines behind the PIX. The users are periodically experiencing "page not found" and unable to download email errors. They come and go.

I enabled logging on the PIX and one of the first messages I saw on the pix was the following:

2006-10-25 10:10:27      Local4.Warning      10.1.1.1      Oct 25 2006 07:59:39: %PIX-4-407001: Deny traffic for local-host inside:10.1.1.52, license limit of 10 exceeded

I did some research and found that I should run 'show local-host'  on the PIX and look at the first line. This is what I found:

PIXFW# show local-host
Interface inside: 10 active, 10 maximum active, 1456 denied

Is the PIX denying internet requests from the PCs because the number of licenses is exceed? If yes then what do you recommend I do to fix this? Please in order of least expensive solution first.

Thanks.

0
Comment
Question by:rockethobbit
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 79

Assisted Solution

by:lrmoore
lrmoore earned 50 total points
ID: 17807718
Yes, it is a license issue. You can upgrade the license to 50 user or to unlimited.

Or you can replace the 501 with a new ASA5505 for probably not much more and have cutting-edge product.
0
 
LVL 32

Accepted Solution

by:
rsivanandan earned 200 total points
ID: 17812218
If would be about 200 dollars more to get it to unrestricted mode on this device.

Cheers,
Rajesh
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If you have an ASA5510 then this sort of thing would be better handled with a CSC Module, however on an ASA5505 thats not an option, and if you want to throw in a quick solution to stop your staff going to facebook during work time, then this is the…
For months I had no idea how to 'discover' the IP address of the other end of a link (without asking someone who knows), and it drove me batty. Think about it. You can't use Cisco Discovery Protocol (CDP) because it's not implemented on the ASAs.…
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question