?
Solved

Looking to upgrade my 5505 FW  to 5506 X

Posted on 2016-11-10
2
Medium Priority
?
21 Views
Last Modified: 2016-11-30
Hello,

Have been thinking of upgrading my 5505 FW to a 5506X, and coincidentally, I am now having problems with the ICMP. The FW suddenly stopped blocking pings and everything seems like if they are hanging on the internet. Now all servers are pingable from both outside and inside. I have reviewed everything in the ASDM, but I am afraid to restart the FW, for fear that it may not boot up, or even more things could be wrong which will only show up after a reboot.

I am not a specialist in FW. So any expert advice will help me a great deal.
The second thing is I will like to know if i can use the same FW to create a DMZ with my two DNS servers on it with all my servers on the inside network and NAT them through to the outside as I have now. Is that the most reliable way to go about it. I am willing to spend a bit extra to have a setup with two FW's running as Active  Active. What all will i need to accomplish this setup?
Thank you in advance

Richard
0
Comment
Question by:Richard Thomas
  • 2
2 Comments
 
LVL 14

Accepted Solution

by:
SIM50 earned 2000 total points (awarded by participants)
ID: 41882673
Have been thinking of upgrading my 5505 FW to a 5506X, and coincidentally, I am now having problems with the ICMP. The FW suddenly stopped blocking pings and everything seems like if they are hanging on the internet. Now all servers are pingable from both outside and inside. I have reviewed everything in the ASDM, but I am afraid to restart the FW, for fear that it may not boot up, or even more things could be wrong which will only show up after a reboot.

Can you post sanitized config?

The second thing is I will like to know if i can use the same FW to create a DMZ with my two DNS servers on it with all my servers on the inside network and NAT them through to the outside as I have now.

Yes. Instead of VLAN interfaces, you will have to configure physical ports. ASA5506X has all routed ports.

I am willing to spend a bit extra to have a setup with two FW's running as Active  Active.

Contexts are not supported in ASA5506X so you can't have active/active failover cluster. You can only have active/standby.
0
 
LVL 14

Expert Comment

by:SIM50
ID: 41907003
Answered.
0

Featured Post

Will You Be GDPR Compliant by 5/28/2018?

GDPR? That's a regulation for the European Union. But, if you collect data from customers or employees within the EU, then you need to know about GDPR and make sure your organization is compliant by May 2018. Check out our preparation checklist to make sure you're on track today!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Occasionally, we encounter connectivity issues that appear to be isolated to cable internet service.  The issues we typically encountered were reset errors within Internet Explorer when accessing web sites or continually dropped or failing VPN conne…
A 2007 NCSA Cyber Security survey revealed that a mere 4% of the population has a full understanding of firewalls. As business owner, you should be part of that 4% that has a full understanding.
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…
The video will let you know the exact process to import OST/PST files to the cloud based Office 365 mailboxes. Using Kernel Import PST to Office 365 tool, one can quickly import numerous OST/PST files to Office 365. Besides this, the tool also comes…

593 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question