The trouble caused by the firewall breaking down

April in the holiday out to play, during the colleague contacted me, said an office firewall and problems. It seems that this batch of D-Link DFL 210 Firewall service life is almost there. Colleague Consulting I bought a new firewall, 210 long ago, to find upgrade products 260, began to return a dealer to a price of more than 900, and later found that D-link will not produce this SME-level firewall. Find a replacement product WatchGuard more than 700, the fourth year to start another software cost.

This is not as good as the choice of Cisco products, the online look at the Asa5505-bun-k9, the price of 460 relatively lower, so the election of a. The dealer is not in the hand, on the new egg set one.

Have to wait for my holiday back to order, after a lot of days 18th to receive goods, the office manager is always complaining about no VPN how inconvenient, keep asking when the arrival. Quickly set up, do not know why in the ASDM LAN IP to save, and the response is particularly slow. Reset also does not effect, later changed a network cable is good. Do the corresponding initialization settings, let another colleague take the past, start to connect up on the net, change back to the original router, find a notebook installed ASDM, remote with TeamViewer check settings. After modifying the port rate and adding the route outside the Internet is no problem, but the VPN is different. I set the VPN according to Site-to-site's wizard, the parameters are all right, that is, the error is not through. Later went to connection profiles below to build a bit on it.

Trouble far from the end, two days found that the network copier can not send a scan after the mail, from my side ping does not pass, Telnet to the server again into the Copier management interface found all normal, suspected network problems, change network cable, restart the switch, toss a lap on it can be. Not after two days of failure and appeared, also found that some colleagues of the computer does not go to the network, is remote, but also video, the problem is not solved. Later a closer look at the ASA's license Inside hosts is 10, only to reflect the product parameters labeled 10 users, is to limit the internal 10 users through the firewall online, previously we bought ASA5510 including D-Link 210 are unrestricted users, ignoring this detail. So there will be people or equipment is not the case.

Check, Cisco can upgrade license to add users, ordered a 50-ul license. Installed in the process of error, the online consulting of the Cisco technical staff, the original can not directly from 10 users to upgrade to 50 users to unlimited, this is when you have 50 users in the case only valid. So to return this, re-order a 10 users to unrestricted, or 10 to 50, considering the future there is the possibility of development, 50 users can easily break through, then 10 to Infinity Bar.

Another round of tossing, and every day cross-examine. Dealer is also in his on a level dealer, involved and back again, see that posture to first back to order new, hurriedly told to order it, forget to return the matter.

Finally, I received a Cisco email with a new license. Also have to go to their site to perform a number of steps, but the new license is an error, and then asked the online technician, check the device serial number, he there to generate new license, send an email to me. Refreshed several times no new mail, glanced into the spam box. Finally in the ASA copy and paste a string of activation code, save restart, Inside hosts into unlimited.

There was no further tidings from the manager. Again, because some details did not take into account, resulting in the work of the passive and inconvenience, to pay more attention later.

The trouble caused by the firewall breaking down