ASA5505-K8 K9 upgrade

Similar Questions

• ASA Cisco license issues

  Hello

  I'm new with Cisco licenses... I produced Cisco ASA 5505 in house with base with the limit of 10 hosts license. More information below.

  I bought the 'L-ASA5505-10-UL =' upgrade remove limit hosts and I got the certificate with Pak. But when I go to the licenses of Cisco website to get the key of activation with this PAK I you will get the error message below.

  Unfortunately I didn't take in charge of the contract so I can not open a Service request as said.

  Any help what to do?

  Error message:

  Bad Sku (s) 'L-ASA5505-10-UL =' for 'ASA5505-BUN-K9': device contains the licenses following "K9-BA-ASA5500.

  Serial number = JMX1526Zxxx

  We're sorry, but the serial number provided is not the same type of platform that serial number has failed. An upgrade is requested is not permitted.

  If you want assistance in solving this problem, please open a Service request by using the TAC Service request tool

  > View version

  The devices allowed for this platform:

  The maximum physical Interfaces: 8 perpetual

  VLAN: 3 restricted DMZ

  Double ISP: Disabled perpetual

  Junction VIRTUAL LAN ports: perpetual 0

  The hosts on the inside: 10 perpetual

  Failover: Disabled perpetual

  VPN - A: enabled perpetual

  VPN-3DES-AES: activated perpetual

  AnyConnect Premium peers: 2 perpetual

  AnyConnect Essentials: Disabled perpetual

  Counterparts in other VPNS: 10 perpetual

  Total VPN counterparts: 25 perpetual

  Shared license: disabled perpetual

  AnyConnect for Mobile: disabled perpetual

  AnyConnect Cisco VPN phone: disabled perpetual

  Assessment of Advanced endpoint: disabled perpetual

  Proxy UC phone sessions: 2 perpetual

  Proxy total UC sessions: 2 perpetual

  Botnet traffic filter: disabled perpetual

  Intercompany Media Engine: Disabled perpetual

  This platform includes a basic license.

  See you soon,.

  Henri

  It's an automatic response, or a person actually answered? License Rep must respond to your e-mail. They would be able to rehost the license for you.

• Need help for upgrading client ASA5505 EasyVPN

  I have a handful of ASA5505 deployed as client devices EasyVPN and want to update the software in one of them remotely. I can telnet and ASDM for devices, but I can not perform a software upgrade via the CLI / tftp or the ASDM. Any ideas on what I need to do to make this work?

  Found a solution

  Add

  TFTP server

  I then issued the copy tftp flash command

• How to change the ASA and ASDM on ASA5505 questioned once

  Can anyone suggest the way to upgrade the software on the Cisco ASA5505 simultaneously both ASA and ASDM without trouble, like I just did?

  Here is what happened.  I copied the files asa821 - k8.bin and asdm - 621.bin for flash memory, then renamed the old versions like Oasa724 - k8.bin and Oasdm - 524.bin and then issued the command reload from the GUI of Windows.

  Big mistake, I lost connectivity ASDM entirely and has been obliged to buy a USB to serial port adapter and plug the cable from port of CLI command so she can return to the unit.  I found that he was running the kernel asa821 - k8.bin, as expected, but apparently the ASDM was still under the version 5.24.

  Should I have created a new folder and moved the older versions of this file, then issued the command reload system and hope for the best?

  I feel that I've defiled things upwards, I guess I have to use tftp to reload the boot image to get the ASA5505 back up again (using the ROMMON commands)

  In fact, the only way that I was able to recover the GUI of Windows used start to asa724 image - k8.bin older command.

  What is the right way to upgrade to new versions asa 8.2 (1) and asdm 6.2 (1)?

  Really, I don't want to risk losing my ability to speak with this box and I spent an anxious afternoon yesterday, when I got to the pop-up message box "can not display the asdm manager."

  ======

  After working with the CLI port, I noticed the following error:

  Set of images of Manager devices, but unable to find disk0: / asdm - 524.bin
  Out of config line 75, "asdm image disk0: / asdm-5...» »

  So apparently some configuration file must point to the correct asdm and just blindly change the files in the folder will NOT work.

  ========

  After working more with the port of the CLI and the GUI of Windows port, I found that the 'asdm image' command did NOT work in the CLI software, but was apparently working in the GUI software, so I ran this command to tell the system to use the recent 6.21 on start.

  After that and issuing the command reload of the CLI, I was able to set up successfully with the latest software of asa and asdm.

  I would like to have access to CLI is valuable in this case.

  I DON'T know why the command 'asdm image' appears inaccessible on the CLI port.

  Any ideas?

  As far as I'm concerned this problem has been resolved (using educated error)

  The boot of the ASA when he tries to use the command 'system startup' file in the config. If it is not very well this file (it was not there because you renamed it), it starts the first image he will find...

  However for ASDM ASA uses just the image you have. You were pointing to asdm5.2 and renamed, there was no valied ASDM image to use.

  In other words you must have just changed the 'asdm image"and"system start"commands in the config and point to new files, save the configuration and restart and then it would have worked fine.

  I hope it helps.

  PK

• Questions about licenses ASA5505

  Hello

  I searched in the ASA 5505 Hardware packages and I learned that there is the following text:

  -The base license, offering only 3 VLAN (3rd one limited). It also offers licenses for only 2 10 IPSec VPN and SSL VPN AnyConnect Premium (which includes the old Cisco VPN Client and EasyConnect connection), representing the two up to 10 VPN.  There are 3 types of packages, whose numbers are:

  * ASA5505-BUN - K9--> which is the basic package, offering up to 10 concurrent users internal

  * ASA5505-50-BUN - K9--> with up to 50 simultaneous users internal

  * ASA5505-UL-BUN - K9--> offering unlimited number of users at the same time internal

  -The license more than security, offering up to 20 VLAN and unlimited number of users simultaneous internal (regarding edition hardware Bundle). It also offers licenses for only 2 25 IPSec VPN and SSL VPN AnyConnect Premium (which includes the old Cisco VPN Client and EasyConnect connection), representing the two up to 25 VPNs. There is that one type of beam, whose part number is:

  * ASA5505-SEC-BUN - K9--> offering unlimited number of users at the same time internal.

  If you have the base base ASA5505-BUN-K9 license and want to upgrade to the license more than security, you would activate 2 licenses:

  + the license more security--> ASA5505-SEC-PL = (or the L-ASA5505-SEC-PL = if you wish to receive by e-mail)

  + unlimited users license--> ASA5505-SW-10-UL (as if the license more security is not hardware-Bundle, it does not come with unlimited number of users)

  and that is why it is better to buy the security more license material-Bundle from the outset that the upgrade later.

  It comes as I could get, but I have a few questions that I would like you to help me solve:

  QUESTION 1. -is the information just preceding or y at - it something wrong?

  QUESTION 2. -I heard there is a license of VPN AnyConnect Essentials offering up to 25 AnyConnect Licenses at the same time essential, and I would like to know what is the difference between these licenses and permits VPN AnyConnect Premium?  I'll be able to connect with a license of AnyConnect Essentials via RDP?

  QUESTION 3.-j' heard as it is another package called ASA5505-SSL10-K9 offering up to 10 SSL VPN AnyConnect Licenses, which has been deprecated all recently. A license more security with unlimited users included in this set of hardware?

  QUESTION 4 - otherwise, there is another license called ASA-SSL-10, which could be installed with license more security. It works the same way the material above Bundle?

  QUESTION 5. -in the case of reach the internal concurrent users allowed limit, how much time would it take to update the meter because a user is getting out of the internal network?

  Kind regards

  PEDRO

  You're right about anyConnect 4. The main difference of old licenses is to count users that must installed AnyConnect. Not the users who use it at the same time.

  But the minimum number of users is 25 users to my knowledge. But also for users of twenty-five and five-year subscription you pay usually less it AnyConnect Essentials and AnyConnect Mobile together.

  The order codes for this combination would be (you need both):

  • L AC-PLS-5 YR-G
  • AC-PLS-5 YR-25-S

  The arp timeout can be changed with the command... (drum roll) "arp timeout"! ;-)

• Upgrade license ASA 5505

  Hi guys, currently I use basic ASA 5505-license and what I know are by default it supports only 10 VPN peer and plan to upgrade, so in this case, contact 2 of the seller, and they give me different about 10 peers, I 1 seller provide me ASA5505-SW-10-50 = and 2 seller provide me with L-ASA5505-SEC-PL =. so my question what part number, should I get if I want to spend 10 VPN peer? I thank in advance

  ASA5505-SW-10-50 = license only gives you more in-house bot users VPN-peers either. You need the update of the license more than VPN-peers SecPlus (L-ASA5505-SEC-PL =). But who will give more internal users if they are also too small. If you need increase these too, you need these two licenses.

• ASA5505 license?

  Hello world

  My question, after the internet page and cisco, homelessness is:

  ASA5505 comes with SSL VPN license or do you need to buy it? My guess is that he shouldn't buy it!

  Can I purchase of SSL VPN router Cisco 1941 ISR G2 and then after that my company upgrades its network infrastructure and buys the SAA, transfer these licenses on ASA? We're talking here about 3 router to different places, so there will be 3 ASA time.

  Is there a link somewhere where I can see the prices of all licenses?

  Hope you can help me

  Thank you very much!

  Hello;

  No, there is no way to transfer the license from a router to an ASA.

  The ASA has a license for 2 clients to connect via SSL (just for you to test it).

  The price list is not displayed on Cisco, you can contact a seller as CDW or Cisco directly to a partner who can help you.

  Mike.

• Configuration VPN Cisco ASA5505 new 800

  I have 2 office buildings using routers Cisco 800 series with a L2L VPN between the two.  I'm upgrading from the router to an ASA5505 at one of the offices but cannot understand the L2L VPN on the SAA.  Specifically, may not know how to set the pre-shared key.  On the Cisco 800 there:

  ISAKMP crypto key address

  This doesn't seem to work on the SAA.  Can anyone help this?  Here is my current config on the Cisco 800...

  crypto ISAKMP policy 10

  BA 3des

  md5 hash

  preshared authentication

  Group 2

  ISAKMP crypto key

  address

  !

  !

  Crypto ipsec transform-set esp-3des esp-md5-hmac DUMAC3

  Crypto ipsec df - bit clear

  !

  MYmap 10 ipsec-isakmp crypto map

  defined by peer 75.148.153.217

  Set security-association second life 36000

  game of transformation-DUMAC3

  match address 101

  access-list 101 permit ip 192.168.1.0 0.0.0.255 192.168.7.0 0.0.0.255

  in your crypto-maps, the '10' and '65535' are the sequence numbers. A CM handset might look like this:

  address for correspondence primaryisp_map 10 101 crypto card

  peer set card crypto primaryisp_map 10 99.119.80.165

  primaryisp_map 10 set transform-set DUMAC3 ikev1 crypto card

  primaryisp_map card crypto 65535-isakmp dynamic ipsec SYSTEM_DEFAULT_CRYPTO_MAP

  card crypto primaryisp_map interface primaryisp

• Need help to access the internal network via VPN on ASA5505 8.4 (1)

  Recently, I upgraded my ASA5055 from 8.02 to 8.4 and since I have updated to the new version I can access my home network is no longer through the VPN. I can connect to the VPN with no problems however I can no longer ping or you connect to my network of 10.0. Someone would be kind enough to look at my config and tell me what needs to be added to make it work? In my old config, I had a statement of NAT for VPN that is no longer here.

  I also wanted to configure WebVPN to work as well, and this is something that I've never been able to understand. Is it also possible that I can be on my 20.0 network and connect to the VPN and access 10.0 as well? When it is connected to my network of 20.0 I'm not received credentials to connect to the VPN. I would be grateful if someone can help out me. The major part of this is the first part of this question.

  My configuration:

  ASA Version 8.4 (1)

  !

  ASA5505 hostname

  domain xxxxxxxx.dyndns.org

  enable encrypted password xxxxxxxxxxxx

  xxxxxxxxxxxxxxx encrypted passwd

  names of

  nameserver 192.168.10.2

  Office of name 192.168.10.3

  name Canon 192.168.10.5

  name 192.168.10.6 mvix

  name 192.168.10.7 xbox

  name 192.168.10.8 dvr

  name 192.168.10.9 bluray

  name 192.168.10.10 lcd

  name 192.168.10.11 mp620

  name 192.168.10.12 kayla

  name 192.168.1.1 asa5505

  name 192.168.1.2 ap1

  name 192.168.10.4 mvix2

  name 192.168.10.13 lcd2

  name 192.168.10.14 dvr2

  !

  interface Vlan1

  nameif management

  security-level 100

  IP address asa5505 255.255.255.248

  management only

  !

  interface Vlan2

  0050.8db6.8287 Mac address

  nameif outside

  security-level 0

  IP address dhcp setroute

  !

  interface Vlan10

  nameif private

  security-level 100

  IP 192.168.10.1 255.255.255.224

  !

  interface Vlan20

  nameif Public

  security-level 100

  IP 192.168.20.1 255.255.255.224

  !

  interface Ethernet0/0

  Description pointing to WAN

  switchport access vlan 2

  !

  interface Ethernet0/1

  Uplink port Linksys 12 description

  switchport access vlan 10

  !

  interface Ethernet0/2

  Description Server 192.168.10.2/27

  switchport access vlan 10

  !

  interface Ethernet0/3

  Uplink Eth1 management description

  !

  interface Ethernet0/4

  switchport access vlan 30

  !

  interface Ethernet0/5

  switchport access vlan 30

  !

  interface Ethernet0/6

  switchport access vlan 30

  !

  interface Ethernet0/7

  Description of Cisco 1200 Access Point

  switchport trunk allowed vlan 1,10,20

  switchport trunk vlan 1 native

  switchport mode trunk

  !

  Banner motd users only, all others must disconnect now!

  boot system Disk0: / asa841 - k8.bin

  passive FTP mode

  clock timezone PST - 8

  clock summer-time recurring PDT

  DNS server-group DefaultDNS

  domain xxxxxxx.dyndns.org

  network object obj - 192.168.50.0

  192.168.50.0 subnet 255.255.255.0

  Server network objects

  host 192.168.10.2

  network object obj - 192.168.10.0

  192.168.10.0 subnet 255.255.255.224

  network object obj - 192.168.20.0

  subnet 192.168.20.0 255.255.255.224

  network server-01 object

  host 192.168.10.2

  network server-02 object

  host 192.168.10.2

  xbox network object

  Home 192.168.10.7

  xbox-01 network object

  Home 192.168.10.7

  xbox-02 network object

  Home 192.168.10.7

  xbox-03 network object

  Home 192.168.10.7

  xbox-04 network object

  Home 192.168.10.7

  network server-03 object

  host 192.168.10.2

  network server-04 object

  host 192.168.10.2

  network server-05 object

  host 192.168.10.2

  Desktop Network object

  host 192.168.10.3

  kayla network object

  Home 192.168.10.12

  Home_VPN_splitTunnelAcl list standard access allowed 192.168.10.0 255.255.255.224

  outside_access_in list extended access permit tcp any any eq 3389

  outside_access_in list extended access permit tcp any any eq 2325

  outside_access_in list extended access permit tcp any eq ftp server object

  outside_access_in list extended access permit tcp any any eq 5851

  outside_access_in list extended access udp allowed any any eq 5850

  outside_access_in list extended access permit tcp any any eq pptp

  outside_access_in list extended access udp allowed any any eq syslog

  outside_access_in list extended access udp allowed any any eq 88

  outside_access_in list extended access udp allowed any any eq 3074

  outside_access_in list extended access permit tcp any any eq 3074

  outside_access_in list extended access permit tcp any any eq field

  outside_access_in list extended access udp allowed any any eq field

  outside_access_in list extended access permitted tcp everything any https eq

  outside_access_in list extended access permit tcp any eq ssh server object

  outside_access_in list extended access permit tcp any any eq 2322

  outside_access_in list extended access permit tcp any any eq 5900

  outside_access_in list extended access permit icmp any any echo response

  outside_access_in list extended access permit icmp any any source-quench

  outside_access_in list extended access allow all unreachable icmp

  outside_access_in list extended access permit icmp any one time exceed

  outside_access_in list extended access udp allowed any any eq 5852

  KaileY_splitTunnelAcl list standard access allowed 192.168.10.0 255.255.255.224

  pager lines 24

  Enable logging

  timestamp of the record

  exploitation forest-size of the buffer of 36000

  logging warnings put in buffered memory

  recording of debug trap

  asdm of logging of information

  address record [email protected] / * /

  exploitation forest-address recipient [email protected] / * / level of errors

  Management Server host forest

  MTU 1500 management

  Outside 1500 MTU

  MTU 1500 private

  MTU 1500 Public

  local pool IPPOOL 192.168.50.2 - 192.168.50.10 255.255.255.0 IP mask

  local pool VPN_POOL 192.168.100.2 - 192.168.100.10 255.255.255.0 IP mask

  no failover

  ICMP unreachable rate-limit 1 burst-size 1

  ICMP allow all outside

  ASDM image disk0: / asdm - 641.bin

  don't allow no asdm history

  ARP timeout 14400

  !

  Server network objects

  NAT (private, foreign) static tcp ftp 5851 service interface

  network object obj - 192.168.10.0

  NAT (private, foreign) dynamic interface

  network object obj - 192.168.20.0

  NAT (outside) dynamic public interface

  network server-01 object

  NAT (private, outside) interface static 2325 2325 tcp service

  network server-02 object

  NAT (private, outside) interface static udp syslog syslog service

  xbox network object

  NAT (private, outside) interface static service udp 88 88

  xbox-01 network object

  NAT (private, outside) interface static service udp 3074-3074

  xbox-02 network object

  NAT (private, outside) interface static service tcp 3074-3074

  xbox-03 network object

  NAT (private, outside) interface static tcp domain domain service

  xbox-04 network object

  field of the udp NAT (private, foreign) of the static interface function

  network server-03 object

  NAT (private, outside) interface static tcp https https service

  network server-04 object

  Static NAT (private, outside) interface service tcp ssh 2322

  network server-05 object

  NAT (private, outside) interface static 5900 5900 tcp service

  Desktop Network object

  NAT (private, outside) interface static service tcp 3389 3389

  kayla network object

  NAT (private, outside) interface static service udp 5852 5852

  Timeout xlate 03:00

  Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02

  Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00

  Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00

  Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute

  timeout tcp-proxy-reassembly 0:01:00

  dynamic-access-policy-registration DfltAccessPolicy

  AAA authentication enable LOCAL console

  AAA authentication http LOCAL console

  the ssh LOCAL console AAA authentication

  AAA authentication LOCAL telnet console

  Enable http server

  http 192.168.1.0 255.255.255.248 management

  redirect http outside 80

  location of SNMP server on the Office floor

  SNMP Server contact [email protected] / * /

  Community SNMP-server

  Server enable SNMP traps snmp authentication linkup, linkdown cold start

  No vpn sysopt connection permit

  Crypto ipsec transform-set ikev1 SHA-ESP-3DES esp-3des esp-sha-hmac

  Crypto-map dynamic outside_dyn_map pfs set 20 Group1

  Crypto-map dynamic outside_dyn_map 20 set transform-set ESP-3DES-SHA ikev1

  life together - the association of security crypto dynamic-map outside_dyn_map 20 28800 seconds

  Crypto-map dynamic outside_dyn_map 20 kilobytes of life together - the association of safety 4608000

  map outside_map 65535-isakmp ipsec crypto dynamic outside_dyn_map

  outside_map interface card crypto outside

  Crypto ikev1 allow outside

  IKEv1 crypto policy 10

  preshared authentication

  3des encryption

  sha hash

  Group 2

  life 86400

  Telnet timeout 5

  SSH 192.168.1.0 255.255.255.248 management

  SSH 0.0.0.0 0.0.0.0 outdoors

  SSH timeout 30

  Console timeout 30

  access to administration management

  dhcpd dns 24.205.1.14 66.215.64.14

  dhcpd ping_timeout 750

  dhcpd field xxxxxxxx.dyndns.org

  dhcpd outside auto_config

  !

  dhcpd manage 192.168.1.4 - 192.168.1.5

  dhcpd enable management

  !

  dhcpd address private 192.168.10.20 - 192.168.10.30

  enable private dhcpd

  !

  dhcpd 192.168.20.2 public address - 192.168.20.30

  dhcpd enable Public

  !

  a basic threat threat detection

  statistical threat detection port

  Statistical threat detection Protocol

  Statistics-list of access threat detection

  no statistical threat detection tcp-interception

  Server NTP 192.43.244.18

  Server NTP 129.6.15.28

  WebVPN

  internal Home_VPN group strategy

  attributes of Group Policy Home_VPN

  value of 8.8.8.8 DNS Server 4.2.2.2

  Ikev1 VPN-tunnel-Protocol without ssl-client

  Split-tunnel-policy tunnelspecified

  value of Split-tunnel-network-list Home_VPN_splitTunnelAcl

  value by default-field www.xxxxxx.com

  the address value IPPOOL pools

  WebVPN

  the value of the URL - list ClientlessBookmark

  political group internal kikou

  group attributes political kikou

  value of 8.8.8.8 DNS Server 4.2.2.2

  Ikev1 VPN-tunnel-Protocol

  Split-tunnel-policy tunnelspecified

  value of Split-tunnel-network-list KaileY_splitTunnelAcl

  XXXXXXX.dyndns.org value by default-field

  username scottrog encrypted password privilege 0 xxxxxxxxxxxxxx

  user_name john encrypted password privilege 0 xxxxxxxxxxxxxxx

  username joek encrypted password privilege 0 xxxxxxxxxxxx

  eostrike encrypted xxxxxxxxxxxx privilege 15 password username

  username almostsi encrypted password privilege 0 xxxxxxxxxxxxxx

  username ezdelarosa password xxxxxxxxxxxxxxencrypted privilege 0

  type tunnel-group Home_VPN remote access

  attributes global-tunnel-group Home_VPN

  IPPOOL address pool

  LOCAL authority-server-group

  authorization-server-group (outside LOCAL)

  Group Policy - by default-Home_VPN

  authorization required

  IPSec-attributes tunnel-group Home_VPN

  IKEv1 pre-shared-key *.

  type tunnel-group SSLClientProfile remote access

  tunnel-group SSLClientProfile webvpn-attributes

  enable SSLVPNClient group-alias

  tunnel-group type ClientLESS remote access

  tunnel-group kanazoé type remote access

  attributes global-tunnel-group kanazoé

  address VPN_POOL pool

  by default-group-policy kikou

  tunnel-group KaileY ipsec-attributes

  IKEv1 pre-shared-key *.

  by default-group Home_VPN tunnel-Group-map

  !

  !

  context of prompt hostname

  call-home

  Profile of CiscoTAC-1

  no active account

  http https://tools.cisco.com/its/service/oddce/services/DDCEService destination address

  email address of destination [email protected] / * /

  destination-mode http transport

  Subscribe to alert-group diagnosis

  Subscribe to alert-group environment

  Subscribe to alert-group monthly periodic inventory

  monthly periodicals to subscribe to alert-group configuration

  daily periodic subscribe to alert-group telemetry

  Cryptochecksum:438ed6084bb3dc956574b1ce83f52b86

  : end

  ASA5505 #.

  Here are the declarations of NAT for your first question:

  network object obj - 192.168.100.0

  255.255.255.0 subnet 192.168.100.0

  NAT (private, foreign) source static obj - 192.168.10.0 obj - 192.168.10.0 destination static obj - 192.168.50.0 obj - 192.168.50.0

  NAT (private, foreign) source static obj - 192.168.10.0 obj - 192.168.10.0 destination static obj - 192.168.100.0 obj - 192.168.100.0

  And 'clear xlate' after the above and that should fix your first question.

  I would check your second question and get back to you shortly.

• Cannot connect remotely ASA5505 on code 8.0.5

  I have 2 ASA5505 firewall deployed, 1 in the data center (code v8.0.3) and 1 at a remote site (code v8.0.2).  Remoteness has 2 PCs that connect to the data center to access services directory, file servers, Exchange, etc.  ASA5505 firewalls are configured for a site to site VPN.

  We had problems of stability with the ASA distance we decided to upgrade the code first.

  We have updated the data center 8.0.5 and everything was fine.  I have given me flows and that I could enter the two ASAs since the data center via ASDM and ssh.

  Then I updated the remote location 8.0.5.  Now, I can't ASDM or ssh to ASA unless I am at that location.  PC are always able to connect to their servers.

  I can't do a ping, telnet, ssh or ASDM inside vlan ip address while I'm at the other site.  I see in the newspapers of being built on the distant firewall incoming connections, but it is not creating a new outbound connection to the movement of the answer.

  8.0.5 did something to block connections to management from outside?

  It is an odd, thanks for sharing the solution!

• No service after upgrade the server to 5.2 on El Capitan

  I have a web server that was doing very well until I left the 5.2 update suggested to install OS X Server. I can't get to broadcast web pages. Screen sharing works always and nothing has changed on the routers, etc.

  I restarted the server after the update and restarted the server itself several times but keep getting connection via a browser failures.

  I did the upgrade even on other servers as well as the upgrade of Sierra. This server is running El Capitan, and is the only one that gave me problems. 5.2 server is not compatible with El Capitan?

  Some additional info:

  I can connect to the server through ftp and other services; just no web service.

  Port tests show that port 80 is not blocked

  Using the IP address I can get to the window of the home server.

  Accessibility means no services available

  Websites is on and I can't find anything that is not defined in law or is different than before the update.

• I've never done a Time Machine backup and I have upgraded to iOS Sierra. Help!

  I'm a fool. After owning my Macbook for 5 years, I failed to make a single Time Machine backup. I just saved my essential to an external hard drive. I have upgraded to iOS Sierra. Big mistake. I want to go back to iOS Capitan, but it does not seem possible. Now, my external hard drive is wiped clean (things are dark). What are my options? If I'm stuck with Sierra?

  If you have downloaded El Capitan, it should always be available in your purchases. Now, you will need to make a backup to backup your personal files.

• Bluetooth connection problem iPhone - audio system Nissan after upgrade iOS10

  After iOS10.0.2 iOS9 on iPhone upgrade, I got a cordially problem receive calls raise Nissan car audio.

  I can make a call without any problem. Bluetooth connection is stable. I can download address book e.t.c. But I can't receive a call. I see the incoming call on the radio shows. After pressing the button "answer" on the car Audio System, audio between iPhone and Audio streams car breaks down.

  But the cellular connection remains active. I need to rotate the audio output on the screen of the iPhone car for iPhone and back to the car. After that, I can continue my call via the car radio.

  Thanks in advance

  Hello StasV,

  Thank you for using communities Support from Apple. I know having a problem with calls on your iPhone in your car, it's not what you expect. The good news is that these steps will be useful for your problem of phone calls while using the bluetooth in your car. Go to settings > general > accessibility > routing of Audio calls and the value headset/Bluetooth Headset and retest your question.

  Audio routing call - the iPhone user Guide
  Help to connect your iPhone, iPad or iPod touch with your car radio

  See you soon!

• Yahoo Mail failure after upgrade of Sierra - iMac

  After the upgrade to Sierra... Now I find that I can't 'see' Yahoo mail... I tried to add the a/c: then the removal of the a/c. I get the Triangle of Hazzard indicating error account! I went down this loop for 2 days...

  All my other email accounts worked instantly. iCloud: Gmail etc.

  I tried to manually configure the settings...

  Everything seems 'normal'... but not a thing, no mail: no record... a real pain. the only joy that is web based too... If I can work...

  But, come on APPLE... This happens to my Yahoo mail whenever I update IOS... What is going on???

  I always seem to end up in a CHAT SESSION just to get my MAIL BASIC... This ISN'T a quality SERVICE...

  MAIL today, is a very basic service... Please, APPLE... issue a patch for us, the little guys

  Rant on.

  help, please, anyone...

  One user posted (Re: Sierra - Yahoo mail offline persistently) he has had success in choosing don't no Yahoo when you set up the account, but to choose the other and set up the details manually. You would like to try and see if it works for you.

• is more able to stream video from some sites after the upgrade to Safari 10

  

  After the upgrade to 10 Safari, I can no longer stream from a certain website. Instead of playing the video stream, I'm prompted to save "player.swf" as shown above.  This problem occurs on el Capitan, and it happens on the Sierra, and it all started when I updated Safari 9.x to 10.0

  Open Safari preferences / Security tab and check the box allow Plug-ins.

  Very soon of Flash player and the plugin will be obsolete and this web page needs to change its code to HTML5.