-Jim

thanx. Yes, I am in process of updating both ASA and ASDM. I will try again once I get them all updated.

It seems not all emails being sent from gmail to my company are getting to the recipients. Now this is a tough one because some are and some aren't. Even from the same person. One email sent at 8:44PM will go through,but the next one sent at 8:46PM gets a delay message. Here is an example. I have a user here who uses gmail and on Friday, she sent 2 emails to someone here in the office who is behind an exhange server. The first email she sent, at 8:44PM got through with no delay. The second email she sent, at 8:46PM got delayed and has yet to make it through. I used ESM to try to search for the missing email but it found nothing. Here is the delay message she got in her gmail account: This is an automatically generated Delivery Status Notification THIS IS A WARNING MESSAGE ONLY. YOU DO NOT NEED TO RESEND YOUR MESSAGE. Delivery to the following recipient has been delayed: [email protected] Message will be retried for 2 more day(s) Technical details of temporary failure: Unspecified Error (SENT_MESSAGE): Connection timed out ----- Message header follows ----- MIME-Version: 1.0 Received: by 10.100.227.18 with SMTP id z18mr4681100ang.49.1240019064703; Fri, 17 Apr 2009 18:44:24 -0700 (PDT) From: Sally Stuart Date: Fri, 17 Apr 2009 20:44:09 -0500 Message-ID: <[email protected]> Subject: Ariad end of run forms To: Tianjuin Zhou Cc: Xiacvotian Zhu , "David C. Dalgardno" , Jake Smith Content-Type: multipart/mixed; boundary=001636c9356addd2970467ca6ffd ----- Message body suppressed -----

yah, i dont even see any related events. Which makes me think the ASA is not talking to serve. Which is why i think something is wrong with ASA.

Let me preface this by saying that I am not great with Cisco, I am much more comfortable in the MS server environment but I inherited this setup and am trying to figure it out best I can. Basically, I am trying to setup a VPN and use my DC as a RADIUS server. Below is my running config (I used the Cisco VPN wizard to attempt to setup the VPN). On my server I got IAS with a remote access policy allowing VPN access when 'NAS-port type match Virtual VPN" and the user is part of the VPN security group. Here is run config, i changed public IP's, domain name and passwords out of paronia, lol. : Saved : Written by enable_15 at 11:39:33.231 UTC Thu Apr 2 2009 ! ASA Version 7.2(2) ! hostname ciscoasa domain-name companyXYZ.local enable password AvFxOc5r.eXgcyRR encrypted names name 192.168.1.2 DC101 description AD/WWW/Mail name 212.32.226.162 mail ! interface Vlan1 nameif inside security-level 100 ip address 192.168.1.1 255.255.255.0 ! interface Vlan2 nameif outside security-level 0 ip address 212.32.226.163 255.255.255.248 ! interface Vlan3 no forward interface Vlan1 nameif dmz security-level 50 no ip address ! interface Ethernet0/0 switchport access vlan 2 ! interface Ethernet0/1 ! interface Ethernet0/2 ! interface Ethernet0/3 ! interface Ethernet0/4 ! interface Ethernet0/5 ! interface Ethernet0/6 ! interface Ethernet0/7 ! passwd AvFxOc5r.eXgcyRR encrypted ftp mode passive dns server-group DefaultDNS domain-name companyXYZ.local same-security-traffic permit inter-interface same-security-traffic permit intra-interface object-group service VNC tcp port-object range 5900 5900 object-group service RDP tcp description Microsoft Terminal Services port-object range 3389 3389 access-list acl_out extended permit icmp any any access-list acl_out remark SMTP mail access access-list acl_out extended permit tcp any host mail eq smtp access-list acl_out remark VNC remote desktop access access-list acl_out extended permit tcp any host mail eq 5900 access-list acl_out remark web access access-list acl_out extended permit tcp any host mail eq www access-list acl_out remark secure web access access-list acl_out extended permit tcp any host mail eq https access-list acl_out remark pop3 mail access access-list acl_out extended permit tcp any host mail eq pop3 access-list acl_out remark Microsoft Terminal Services Access access-list acl_out extended permit tcp any host mail object-group RDP access-list acl_out extended permit tcp any host mail eq imap4 access-list inside_nat0_outbound extended permit ip any 192.168.1.192 255.255.255.224 access-list 110 extended permit tcp host mail host DC101 eq 3389 pager lines 24 logging asdm informational mtu inside 1500 mtu outside 1500 mtu dmz 1500 ip local pool company-vpn 192.168.1.200-192.168.1.223 mask 255.255.255.0 icmp unreachable rate-limit 1 burst-size 1 asdm image disk0:/asdm-522.bin no asdm history enable arp timeout 14400 global (outside) 1 interface nat (inside) 0 access-list inside_nat0_outbound nat (inside) 1 0.0.0.0 0.0.0.0 static (inside,outside) mail DC101 netmask 255.255.255.255 access-group acl_out in interface outside route outside 0.0.0.0 0.0.0.0 212.32.226.161 1 timeout xlate 3:00:00 timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00 timeout uauth 0:05:00 absolute aaa-server DC101 protocol nt aaa-server DC101 host DC101 timeout 5 nt-auth-domain-controller DC101 group-policy company-vpn internal group-policy company-vpn attributes dns-server value 192.168.1.2 vpn-tunnel-protocol IPSec default-domain value companyXYZ.local http server enable http 192.168.1.0 255.255.255.0 inside no snmp-server location no snmp-server contact snmp-server enable traps snmp authentication linkup linkdown coldstart crypto ipsec transform-set ESP-3DES-SHA esp-3des esp-sha-hmac crypto dynamic-map outside_dyn_map 20 set pfs crypto dynamic-map outside_dyn_map 20 set transform-set ESP-3DES-SHA crypto map outside_map 65535 ipsec-isakmp dynamic outside_dyn_map crypto map outside_map interface outside crypto isakmp enable outside crypto isakmp policy 10 authentication pre-share encryption 3des hash sha group 2 lifetime 86400 telnet timeout 5 ssh 0.0.0.0 0.0.0.0 outside ssh timeout 5 console timeout 0 dhcpd auto_config outside ! dhcpd address DC101-192.168.1.129 inside ! ! class-map inspection_default match default-inspection-traffic ! ! policy-map type inspect dns preset_dns_map parameters message-length maximum 512 policy-map global_policy class inspection_default inspect dns preset_dns_map inspect ftp inspect h323 h225 inspect h323 ras inspect rsh inspect rtsp inspect esmtp inspect sqlnet inspect skinny inspect sunrpc inspect xdmcp inspect sip inspect netbios inspect tftp ! service-policy global_policy global prompt hostname context Cryptochecksum:092c077512dd971312a16f6fbcf6346f : end

CEO, CSO, CIO, etc don't have the time to read an informative email telling them about that little yellow shield near their clock. Nor want to sit and listen to me explain it. My job is to make their lives easier and simple when it comes to computing, not load them up with information they are going to forget 10 minutes later.

well in the grand scheme of things, no. But then I have users telling me they see some balloon telling them they need to install updates, what does that mean? "I clicked on it and my computer restarted and I never saved my work". etc etc etc etc etc

just hit me with the stupid stick!!!!!!

Where am I going wrong in these settings that is allowing users to see the icon and have the option to install the updates now? Pic attached.

Ahh gotcha. I was on an admin account, which is why i was able to send out using anyones email. Tried it on a standard user and they were denied. Thanks

I dont know if I want them to know about that feature though, for fear of someone passing themselves off as the CEO or something. Luckily, no one knows about it yet.

I'm setting up a "[email protected]" address on my companies website for people to submit inquires. I have this email setup as a distribution group so that the email gets sent to multiple people. When these people respond, they want to email to come from that info address and not [email protected]. Is there any easy way to do this, or will I simply need to have those people actually connect to info's outlook profile and send out the emails that way?

make sure your not an open relay! lol

I know that in the actual GP settings, I need to go under, 'Computer Settings'. But do I apply that GP to machines or users? Cause I know lots of time, I will change other 'Computer Settings', but the GPO still gets applied to Authenticated Users

I thought I read somewhere that you need to apply a GPO that deals with automatic updates to a group of computers as opposed to a group of users. Is this true? What is the difference in applying it to users as opposed to machines, if any?

It worked and I can easily follow it if I want to add more fields. thx