Internet link is up but i am unable to browse any website

we have 512k link on leased line, leased line modem is directly attahed with cisco router by serial cable and router is attached with cisco PIX 50E firewall and PIX is attached with switch and all PC are connected with switch...... every thing was working fine but from yesterday no one able to browse any websites but I can able to telnet the router from other locations and also able to access my servers remotely by VPN client software [remote desktop]
szshanAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

joefreedomCommented:
Can you navigate to websites using IP addresses?  Have you checked your DNS settings?  Is there a security configuration on the PIX that may be blocking port 80 outbound?

0
automationstationCommented:
Check your DNS configuration
0
joefreedomCommented:
try browsing to http://74.125.67.100/ with one of the machines connected to the LAN, it should resolve to google if there is a DNS issue.
0
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

szshanAuthor Commented:
i have tried i guess this is a DNS or 80 blocking issue ... can you tell me how i trouble shoot it
0
joefreedomCommented:
Did it work or did it fail when you tried to navigate to google using the IP address?  If it worked this is a DNS issue, it it failed we have something else going on...maybe the PIX blocking port 80.  We need to know if it worked or not first.
0
szshanAuthor Commented:
No that not works try port 80
0
joefreedomCommented:
Sorry bud, i'm not a cisco guru but I can try to help out until a more qualified expert joins us....  Go to this site: http://www.netcraftsmen.net/resources/archived-articles/377-managing-a-cisco-pix-with-pdm.html

You need to determine the IP address of your PIX device then use a browser to connect to the graphical user interface.  Using the above guide checkout how to bring-up the access rules, look at the second screen-shot from the top.  Once you are logged into the pix it looks like you just select "Configuration", then "access rules".

However, this previous EE article states in regards to a PIX configuration:
"for outbound traffic you do not have to do anything as by default everything is allowed from inside to a lower securiy interface (outside) so if the connection is initiated from the inside you will be fine. "
http://www.experts-exchange.com/Security/Software_Firewalls/Q_21146200.html

If this is true you probably have something else occuring in your environment.  Can you think of anything that may have changed since yesterday when everything was working?
0
joefreedomCommented:
Might be worth a call to your ISP in the meantime as well... they may have something going on with their configuration if everything was working fine yesterday and today you are having difficulties.  They also may have some technical staff that could more easily assist you with troubleshooting.
0
szshanAuthor Commented:
i have PDM installed in PIX but problem it also not opening its asking me a user id and password and after that its just process and process no managemnt window comes
0
szshanAuthor Commented:
i alreday phoned to ISP and they said all is fine from there end.... : (
0
joefreedomCommented:
Have you confirmed that the credentials you are using to login to the PIX are valid?



Cisco PIX Password Recovery:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_password_recovery09186a008009478b.shtml

http://www.petenetlive.com/Tech/Firewalls/Cisco/pixpasswordrecovery.htm
0
joefreedomCommented:
Have you checked the status of the switch and your other networking devices for issues?  Specifically check the switch for indicator lights and signs of it moving traffic...
0
szshanAuthor Commented:
i can loggin on to PIX and router so password are right as far as switch is concern i belive its working fine as users can acces the shares folder and i can access server from other location...
0
joefreedomCommented:
Try a telnet connection to the PIX for command line interaction
0
szshanAuthor Commented:
i did and its work and i can ping that ip also but problem browsing.
0
joefreedomCommented:
If you can telnet into the PIX, issue a "show access-list" command and copy/paste the results here.

Also you may consider the following, now again, I'm NOT certain the PIX is even the culprit in your situation, so take this all with a grain of salt.

"If you want to see messages concerning the PIX dropping packets, you should manually add a deny statement at the very end of your ACL that drops all traffic.  Cisco highly recommends that you don't log these messages to the console, but to a syslog server instead, because a very busy network could easily flood the console and cause the PIX to perform extra processing."

"access-list ACL_ID deny ip any any"

If you choose to try this, you want this at the very bottom of your ACL so pick an appropriate ACL_ID.

Source: http://books.google.com/books?id=GMTsxvrYGMoC&pg=PA176&lpg=PA176&dq=pix+view+acl&source=bl&ots=Dx5hxUoI1l&sig=dxyyQvstytjGnTpUSlKJT6fIGbE&hl=en&ei=0HZfSoaRMpD-M-7xta4C&sa=X&oi=book_result&ct=result&resnum=7
0
WolfhereCommented:
Are you passing DNS port 53 (UDP AND TCP) to the outside on the PIX? At first glance, like everyone else sounds like DNS. Telnet uses a different port than DNS.
0
szshanAuthor Commented:
thanks for all ..problem has fixed now. My ISP has given same ip to an other client.they gave me new IP
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Routers

From novice to tech pro — start learning today.