Error of the ASA

Similar Questions

• % 7-ASA-710005: request TCP thrown error in the Client VPN Site to CISCO ASA 5510

  Hi friends,

  I am trying to built customer to site VPN CISCO ASA 5510 8.4 (4) and get error below when connecting to a cisco VPN client software. Also, I'm below ASA, log. Please help me to reslove.

  Error in CISCO VPN Client software:

  Secure VPN connection terminated locally by the client.

  Reason: 414: unable to establish a TCP connection.

  Error in CISCO ASA 5510

  7-ASA-710005%: TCP request and eliminated from 49276 outward: 10000

  The ASA configuration:

  XYZ # sh run
  : Saved
  :
  ASA Version 8.4 (4)
  !
  hostname XYZ
  domain XYZ
  activate the password encrypted 3uLkVc9JwRA1/OXb N3
  activate the encrypted password of R/x90UjisGVJVlh2
  2KFQnbNIdI.2KYOU encrypted passwd
  names of
  !
  interface Ethernet0/0
  nameif outside_rim
  security-level 0
  IP 1.1.1.1 255.255.255.252
  !
  interface Ethernet0/1
  full duplex
  nameif XYZ_DMZ
  security-level 50
  IP 172.1.1.1 255.255.255.248
  !
  interface Ethernet0/2
  Speed 100
  full duplex
  nameif outside
  security-level 0
  IP address 2.2.2.2 255.255.255.252
  !
  interface Ethernet0/3
  Speed 100
  full duplex
  nameif inside
  security-level 100
  IP 3.3.3.3 255.255.255.224
  !
  interface Management0/0
  Shutdown
  No nameif
  no level of security
  no ip address
  !
  boot system Disk0: / asa844 - k8.bin
  passive FTP mode
  DNS domain-lookup outside
  DNS server-group DefaultDNS
  Server name xx.xx.xx.xx
  Server name xx.xx.xx.xx
  Server name xx.xx.xx.xx
  Server name xx.xx.xx.xx
  domain XYZ
  network object obj - 172.17.10.3
  Home 172.17.10.3
  network object obj - 10.1.134.0
  10.1.134.0 subnet 255.255.255.0
  network object obj - 208.75.237.0
  208.75.237.0 subnet 255.255.255.0
  network object obj - 10.7.0.0
  10.7.0.0 subnet 255.255.0.0
  network object obj - 172.17.2.0
  172.17.2.0 subnet 255.255.255.0
  network object obj - 172.17.3.0
  172.17.3.0 subnet 255.255.255.0
  network object obj - 172.19.2.0
  172.19.2.0 subnet 255.255.255.0
  network object obj - 172.19.3.0
  172.19.3.0 subnet 255.255.255.0
  network object obj - 172.19.7.0
  172.19.7.0 subnet 255.255.255.0
  network object obj - 10.1.0.0
  10.1.0.0 subnet 255.255.0.0
  network object obj - 10.2.0.0
  10.2.0.0 subnet 255.255.0.0
  network object obj - 10.3.0.0
  10.3.0.0 subnet 255.255.0.0
  network object obj - 10.4.0.0
  10.4.0.0 subnet 255.255.0.0
  network object obj - 10.6.0.0
  10.6.0.0 subnet 255.255.0.0
  network object obj - 10.9.0.0
  10.9.0.0 subnet 255.255.0.0
  network object obj - 10.11.0.0
  10.11.0.0 subnet 255.255.0.0
  network object obj - 10.12.0.0
  10.12.0.0 subnet 255.255.0.0
  network object obj - 172.19.1.0
  172.19.1.0 subnet 255.255.255.0
  network object obj - 172.21.2.0
  172.21.2.0 subnet 255.255.255.0
  network object obj - 172.16.2.0
  172.16.2.0 subnet 255.255.255.0
  network object obj - 10.19.130.201
  Home 10.19.130.201
  network object obj - 172.30.2.0
  172.30.2.0 subnet 255.255.255.0
  network object obj - 172.30.3.0
  172.30.3.0 subnet 255.255.255.0
  network object obj - 172.30.7.0
  172.30.7.0 subnet 255.255.255.0
  network object obj - 10.10.1.0
  10.10.1.0 subnet 255.255.255.0
  network object obj - 10.19.130.0
  10.19.130.0 subnet 255.255.255.0
  network of object obj-XXXXXXXX
  host XXXXXXXX
  network object obj - 145.248.194.0
  145.248.194.0 subnet 255.255.255.0
  network object obj - 10.1.134.100
  Home 10.1.134.100
  network object obj - 10.9.124.100
  Home 10.9.124.100
  network object obj - 10.1.134.101
  Home 10.1.134.101
  network object obj - 10.9.124.101
  Home 10.9.124.101
  network object obj - 10.1.134.102
  Home 10.1.134.102
  network object obj - 10.9.124.102
  Home 10.9.124.102
  network object obj - 115.111.99.133
  Home 115.111.99.133
  network object obj - 10.8.108.0
  10.8.108.0 subnet 255.255.255.0
  network object obj - 115.111.99.129
  Home 115.111.99.129
  network object obj - 195.254.159.133
  Home 195.254.159.133
  network object obj - 195.254.158.136
  Home 195.254.158.136
  network object obj - 209.164.192.0
  subnet 209.164.192.0 255.255.224.0
  network object obj - 209.164.208.19
  Home 209.164.208.19
  network object obj - 209.164.192.126
  Home 209.164.192.126
  network object obj - 10.8.100.128
  subnet 10.8.100.128 255.255.255.128
  network object obj - 115.111.99.130
  Home 115.111.99.130
  network object obj - 10.10.0.0
  subnet 10.10.0.0 255.255.0.0
  network object obj - 115.111.99.132
  Home 115.111.99.132
  network object obj - 10.10.1.45
  Home 10.10.1.45
  network object obj - 10.99.132.0
  10.99.132.0 subnet 255.255.255.0
  the Serversubnet object-group network
  object-network 10.10.1.0 255.255.255.0
  network-object 10.10.5.0 255.255.255.192
  the XYZ_destinations object-group network
  object-network 10.1.0.0 255.255.0.0
  object-network 10.2.0.0 255.255.0.0
  network-object 10.3.0.0 255.255.0.0
  network-object 10.4.0.0 255.255.0.0
  network-object 10.6.0.0 255.255.0.0
  network-object 10.7.0.0 255.255.0.0
  network-object 10.11.0.0 255.255.0.0
  object-network 10.12.0.0 255.255.0.0
  object-network 172.19.1.0 255.255.255.0
  object-network 172.19.2.0 255.255.255.0
  object-network 172.19.3.0 255.255.255.0
  object-network 172.19.7.0 255.255.255.0
  object-network 172.17.2.0 255.255.255.0
  object-network 172.17.3.0 255.255.255.0
  object-network 172.16.2.0 255.255.255.0
  object-network 172.16.3.0 255.255.255.0
  host of the object-Network 10.50.2.206
  the XYZ_us_admin object-group network
  network-object 10.3.1.245 255.255.255.255
  network-object 10.5.33.7 255.255.255.255
  network-object 10.211.5.7 255.255.255.255
  network-object 10.3.33.7 255.255.255.255
  network-object 10.211.3.7 255.255.255.255
  the XYZ_blr_networkdevices object-group network
  object-network 10.200.10.0 255.255.255.0
  access list XYZ extended ip 10.19.130.0 allow 255.255.255.0 145.248.194.0 255.255.255.0
  access list XYZ extended ip 10.19.130.0 allow 255.255.255.0 host 172.16.2.21
  access list XYZ extended ip 10.19.130.0 allow 255.255.255.0 host 172.16.2.22
  access list XYZ extended ip 10.19.130.0 allow 255.255.255.0 host XXXXXXXX
  Access extensive list ip 10.19.130.0 XYZ_PAT allow 255.255.255.0 any
  Access extensive list ip 10.1.134.0 XYZ_PAT allow 255.255.255.0 host 195.254.159.133
  Access extensive list ip 10.1.134.0 XYZ_PAT allow 255.255.255.0 host 195.254.158.136
  Access extensive list ip 10.1.134.0 XYZ_PAT allow 255.255.255.0 any
  Access extensive list ip 10.1.134.0 XYZ_PAT allow 255.255.255.0 209.164.192.0 255.255.224.0
  Access extensive list ip 10.1.134.0 XYZ_PAT allow 255.255.255.0 host 209.164.208.19
  Access extensive list ip 10.1.134.0 XYZ_PAT allow 255.255.255.0 host 209.164.192.126
  IP 10.1.134.0 allow Access-list extended sheep 255.255.255.0 208.75.237.0 255.255.255.0
  Allow Access-list extended sheep 255.255.255.0 10.1.134.0 IP 10.7.0.0 255.255.0.0
  IP 10.1.134.0 allow Access-list extended sheep 255.255.255.0 172.17.2.0 255.255.255.0
  IP 10.1.134.0 allow Access-list extended sheep 255.255.255.0 172.17.3.0 255.255.255.0
  IP 10.1.134.0 allow Access-list extended sheep 255.255.255.0 172.19.2.0 255.255.255.0
  IP 10.1.134.0 allow Access-list extended sheep 255.255.255.0 172.19.3.0 255.255.255.0
  IP 10.1.134.0 allow Access-list extended sheep 255.255.255.0 172.19.7.0 255.255.255.0
  10.1.134.0 IP Access-list extended sheep 255.255.255.0 allow 10.1.0.0 255.255.0.0
  10.1.134.0 IP Access-list extended sheep 255.255.255.0 allow 10.2.0.0 255.255.0.0
  Allow Access-list extended sheep 255.255.255.0 10.1.134.0 IP 10.3.0.0 255.255.0.0
  10.1.134.0 IP Access-list extended sheep 255.255.255.0 allow 10.4.0.0 255.255.0.0
  10.1.134.0 IP Access-list extended sheep 255.255.255.0 allow 10.6.0.0 255.255.0.0
  Allow Access-list extended sheep 255.255.255.0 10.1.134.0 IP 10.9.0.0 255.255.0.0
  Allow Access-list extended sheep 255.255.255.0 10.1.134.0 IP 10.11.0.0 255.255.0.0
  10.1.134.0 IP Access-list extended sheep 255.255.255.0 allow 10.12.0.0 255.255.0.0
  IP 10.1.134.0 allow Access-list extended sheep 255.255.255.0 172.19.1.0 255.255.255.0
  IP 10.1.134.0 allow Access-list extended sheep 255.255.255.0 172.21.2.0 255.255.255.0
  10.1.134.0 IP Access-list extended sheep 255.255.255.0 allow 172.16.2.0 255.255.255.0
  access-list extended sheep allowed host ip 10.19.130.201 172.30.2.0 255.255.255.0
  access-list extended sheep allowed host ip 10.19.130.201 172.30.3.0 255.255.255.0
  access-list extended sheep allowed host ip 10.19.130.201 172.30.7.0 255.255.255.0
  access-list extended sheep allowed ip object-group Serversubnet-group of objects XYZ_destinations
  10.10.1.0 IP Access-list extended sheep 255.255.255.0 allow 10.2.0.0 255.255.0.0
  10.19.130.0 IP Access-list extended sheep 255.255.255.0 allow host XXXXXXXX
  IP 10.19.130.0 allow Access-list extended sheep 255.255.255.0 145.248.194.0 255.255.255.0
  Access extensive list ip 10.8.108.0 Guest_PAT allow 255.255.255.0 any
  CACIB list extended access permitted ip 10.8.100.128 255.255.255.128 145.248.194.0 255.255.255.0
  Access extensive list ip 10.8.100.128 Cacib_PAT allow 255.255.255.128 all
  Access extensive list ip 10.1.134.0 New_Edge allow 255.255.255.0 208.75.237.0 255.255.255.0
  Allow XYZ_global to access extended list ip 10.7.0.0 255.255.0.0 10.1.134.0 255.255.255.0
  Access extensive list ip 10.1.134.0 XYZ_global allow 255.255.255.0 10.7.0.0 255.255.0.0
  Access extensive list ip 172.17.2.0 XYZ_global allow 255.255.255.0 10.1.134.0 255.255.255.0
  Access extensive list ip 172.17.3.0 XYZ_global allow 255.255.255.0 10.1.134.0 255.255.255.0
  Access extensive list ip 172.19.2.0 XYZ_global allow 255.255.255.0 10.1.134.0 255.255.255.0
  Access extensive list ip 172.19.3.0 XYZ_global allow 255.255.255.0 10.1.134.0 255.255.255.0
  Access extensive list ip 172.19.7.0 XYZ_global allow 255.255.255.0 10.1.134.0 255.255.255.0
  Access extensive list ip 10.1.0.0 XYZ_global allow 255.255.0.0 10.1.134.0 255.255.255.0
  Access extensive list 10.2.0.0 ip XYZ_global 255.255.0.0 allow 10.1.134.0 255.255.255.0
  Allow XYZ_global to access extended list ip 10.3.0.0 255.255.0.0 10.1.134.0 255.255.255.0
  Access extensive list 10.4.0.0 ip XYZ_global 255.255.0.0 allow 10.1.134.0 255.255.255.0
  Access extensive list 10.6.0.0 ip XYZ_global 255.255.0.0 allow 10.1.134.0 255.255.255.0
  Access extensive list ip 10.9.0.0 XYZ_global allow 255.255.0.0 10.1.134.0 255.255.255.0
  Allow XYZ_global to access extended list ip 10.11.0.0 255.255.0.0 10.1.134.0 255.255.255.0
  Access extensive list 10.12.0.0 ip XYZ_global 255.255.0.0 allow 10.1.134.0 255.255.255.0
  Access extensive list ip 172.19.1.0 XYZ_global allow 255.255.255.0 10.1.134.0 255.255.255.0
  Access extensive list ip 172.21.2.0 XYZ_global allow 255.255.255.0 10.1.134.0 255.255.255.0
  Access extensive list ip 10.1.134.0 XYZ_global allow 255.255.255.0 172.17.2.0 255.255.255.0
  Access extensive list ip 10.1.134.0 XYZ_global allow 255.255.255.0 172.17.3.0 255.255.255.0
  Access extensive list ip 10.1.134.0 XYZ_global allow 255.255.255.0 172.19.2.0 255.255.255.0
  Access extensive list ip 10.1.134.0 XYZ_global allow 255.255.255.0 172.19.3.0 255.255.255.0
  Access extensive list ip 10.1.134.0 XYZ_global allow 255.255.255.0 172.19.7.0 255.255.255.0
  Access extensive list ip 10.1.134.0 XYZ_global allow 255.255.255.0 10.1.0.0 255.255.0.0
  Access extensive list ip 10.1.134.0 XYZ_global allow 255.255.255.0 10.2.0.0 255.255.0.0
  Access extensive list ip 10.1.134.0 XYZ_global allow 255.255.255.0 10.3.0.0 255.255.0.0
  Access extensive list ip 10.1.134.0 XYZ_global allow 255.255.255.0 10.4.0.0 255.255.0.0
  Access extensive list ip 10.1.134.0 XYZ_global allow 255.255.255.0 10.6.0.0 255.255.0.0
  Access extensive list ip 10.1.134.0 XYZ_global allow 255.255.255.0 10.9.0.0 255.255.0.0
  Access extensive list ip 10.1.134.0 XYZ_global allow 255.255.255.0 10.11.0.0 255.255.0.0
  Access extensive list ip 10.1.134.0 XYZ_global allow 255.255.255.0 10.12.0.0 255.255.0.0
  Access extensive list ip 10.1.134.0 XYZ_global allow 255.255.255.0 172.19.1.0 255.255.255.0
  Access extensive list ip 10.1.134.0 XYZ_global allow 255.255.255.0 172.21.2.0 255.255.255.0
  XYZ_global to access extended list ip 172.16.2.0 allow 255.255.255.0 10.1.134.0 255.255.255.0
  Access extensive list ip 10.1.134.0 XYZ_global allow 255.255.255.0 172.16.2.0 255.255.255.0
  Access extensive list ip 172.30.2.0 XYZ_global allow 255.255.255.0 host 10.19.130.201
  XYZ_global list extended access allowed host ip 10.19.130.201 172.30.2.0 255.255.255.0
  Access extensive list ip 172.30.3.0 XYZ_global allow 255.255.255.0 host 10.19.130.201
  XYZ_global list extended access allowed host ip 10.19.130.201 172.30.3.0 255.255.255.0
  Access extensive list ip 172.30.7.0 XYZ_global allow 255.255.255.0 host 10.19.130.201
  XYZ_global list extended access allowed host ip 10.19.130.201 172.30.7.0 255.255.255.0
  XYZ_global list extended access permitted ip object-group Serversubnet-group of objects XYZ_destinations
  XYZ_global list extended access permitted ip object-group XYZ_destinations-group of objects Serversubnet
  ML_VPN list extended access allowed host ip 115.111.99.129 209.164.192.0 255.255.224.0
  permit access list extended ip host 115.111.99.129 ML_VPN 209.164.208.19
  permit access list extended ip host 115.111.99.129 ML_VPN 209.164.192.126
  permit access list extended ip host 10.9.124.100 Da_VPN 10.125.81.88
  permit access list extended ip host 10.9.124.101 Da_VPN 10.125.81.88
  permit access list extended ip host 10.9.124.102 Da_VPN 10.125.81.88
  Da_VPN list extended access allowed host ip 10.9.124.100 10.125.81.0 255.255.255.0
  Da_VPN list extended access allowed host ip 10.9.124.101 10.125.81.0 255.255.255.0
  Da_VPN list extended access allowed host ip 10.9.124.102 10.125.81.0 255.255.255.0
  Sr_PAT to access extended list ip 10.10.0.0 allow 255.255.0.0 any
  Da_Pd_VPN list extended access allowed host ip 10.9.124.100 10.125.80.64 255.255.255.192
  Da_Pd_VPN list extended access allowed host ip 10.9.124.100 10.125.64.0 255.255.240.0
  permit access list extended ip host 10.9.124.100 Da_Pd_VPN 10.125.85.46
  permit access list extended ip host 10.9.124.100 Da_Pd_VPN 10.125.86.46
  Da_Pd_VPN list extended access allowed host ip 10.9.124.101 10.125.80.64 255.255.255.192
  Da_Pd_VPN list extended access allowed host ip 10.9.124.101 10.125.64.0 255.255.240.0
  permit access list extended ip host 10.9.124.101 Da_Pd_VPN 10.125.85.46
  permit access list extended ip host 10.9.124.101 Da_Pd_VPN 10.125.86.46
  Da_Pd_VPN list extended access allowed host ip 10.9.124.102 10.125.80.64 255.255.255.192
  Da_Pd_VPN list extended access allowed host ip 10.9.124.102 10.125.64.0 255.255.240.0
  permit access list extended ip host 10.9.124.102 Da_Pd_VPN 10.125.85.46
  permit access list extended ip host 10.9.124.102 Da_Pd_VPN 10.125.86.46
  Access extensive list ip 10.19.130.0 XYZ_reliance allow 255.255.255.0 145.248.194.0 255.255.255.0
  access-list coextended permit ip host 2.2.2.2 XXXXXXXX
  access-list coextended allow the host ip XXXXXXXXhost 2.2.2.2
  permitted this access list extended ip 10.1.134.0 255.255.255.0 208.75.237.0 255.255.255.0
  permitted this access list extended ip 208.75.237.0 255.255.255.0 10.1.134.0 255.255.255.0
  access list acl-outside extended permit ip host 57.66.81.159 172.17.10.3
  access list acl-outside extended permit ip host 80.169.223.179 172.17.10.3
  access list acl-outside scope permit ip any host 172.17.10.3
  access list acl-outside extended permitted tcp any host 10.10.1.45 eq https
  access list acl-outside extended permit tcp any any eq 10000
  access list acl-outside extended deny ip any any newspaper
  pager lines 10
  Enable logging
  debug logging in buffered memory
  outside_rim MTU 1500
  MTU 1500 XYZ_DMZ
  Outside 1500 MTU
  Within 1500 MTU
  IP pool local XYZ_c2s_vpn_pool 172.30.10.51 - 172.30.10.254
  ICMP unreachable rate-limit 1 burst-size 1
  ICMP allow all outside
  ICMP allow any inside
  don't allow no asdm history
  ARP timeout 14400
  NAT (inside, all) source static obj - 10.1.134.0 obj - 10.1.134.0 destination static obj - 208.75.237.0 obj - 208.75.237.0 no-proxy-arp-search to itinerary
  NAT (inside, all) source static obj - 10.1.134.0 obj - 10.1.134.0 destination static obj - 10.7.0.0 obj - 10.7.0.0 no-proxy-arp-search to itinerary
  NAT (inside, all) source static obj - 10.1.134.0 obj - 10.1.134.0 destination static obj - 172.17.2.0 obj - 172.17.2.0 no-proxy-arp-search to itinerary
  NAT (inside, all) source static obj - 10.1.134.0 obj - 10.1.134.0 destination static obj - 172.17.3.0 obj - 172.17.3.0 no-proxy-arp-search to itinerary
  NAT (inside, all) source static obj - 10.1.134.0 obj - 10.1.134.0 destination static obj - 172.19.2.0 obj - 172.19.2.0 no-proxy-arp-search to itinerary
  NAT (inside, all) source static obj - 10.1.134.0 obj - 10.1.134.0 destination static obj - 172.19.3.0 obj - 172.19.3.0 no-proxy-arp-search to itinerary
  NAT (inside, all) source static obj - 10.1.134.0 obj - 10.1.134.0 destination static obj - 172.19.7.0 obj - 172.19.7.0 no-proxy-arp-search to itinerary
  NAT (inside, all) source static obj - 10.1.134.0 obj - 10.1.134.0 destination static obj - 10.1.0.0 obj - 10.1.0.0 non-proxy-arp-search to itinerary
  NAT (inside, all) source static obj - 10.1.134.0 obj - 10.1.134.0 destination static obj - 10.2.0.0 obj - 10.2.0.0 non-proxy-arp-search to itinerary
  NAT (inside, all) source static obj - 10.1.134.0 obj - 10.1.134.0 destination static obj - 10.3.0.0 obj - 10.3.0.0 no-proxy-arp-search to itinerary
  NAT (inside, all) source static obj - 10.1.134.0 obj - 10.1.134.0 destination static obj - 10.4.0.0 obj - 10.4.0.0 non-proxy-arp-search to itinerary
  NAT (inside, all) source static obj - 10.1.134.0 obj - 10.1.134.0 destination static obj - 10.6.0.0 obj - 10.6.0.0 non-proxy-arp-search to itinerary
  NAT (inside, all) source static obj - 10.1.134.0 obj - 10.1.134.0 destination static obj - 10.9.0.0 obj - 10.9.0.0 no-proxy-arp-search to itinerary
  NAT (inside, all) source static obj - 10.1.134.0 obj - 10.1.134.0 destination static obj - 10.11.0.0 obj - 10.11.0.0 no-proxy-arp-search to itinerary
  NAT (inside, all) source static obj - 10.1.134.0 obj - 10.1.134.0 destination static obj - 10.12.0.0 obj - 10.12.0.0 non-proxy-arp-search to itinerary
  NAT (inside, all) source static obj - 10.1.134.0 obj - 10.1.134.0 destination static obj - 172.19.1.0 obj - 172.19.1.0 no-proxy-arp-search to itinerary
  NAT (inside, all) source static obj - 10.1.134.0 obj - 10.1.134.0 destination static obj - 172.21.2.0 obj - 172.21.2.0 no-proxy-arp-search to itinerary
  NAT (inside, all) source static obj - 10.1.134.0 obj - 10.1.134.0 destination static obj - 172.16.2.0 obj - 172.16.2.0 non-proxy-arp-search to itinerary
  NAT (inside, all) source static obj - 10.19.130.201 obj - 10.19.130.201 destination static obj - 172.30.2.0 obj - 172.30.2.0 no-proxy-arp-search to itinerary
  NAT (inside, all) source static obj - 10.19.130.201 obj - 10.19.130.201 destination static obj - 172.30.3.0 obj - 172.30.3.0 no-proxy-arp-search to itinerary
  NAT (inside, all) source static obj - 10.19.130.201 obj - 10.19.130.201 destination static obj - 172.30.7.0 obj - 172.30.7.0 no-proxy-arp-search to itinerary
  NAT (inside, all) static source Serversubnet Serversubnet XYZ_destinations XYZ_destinations non-proxy-arp-search of route static destination
  NAT (inside, all) source static obj - 10.10.1.0 obj - 10.10.1.0 destination static obj - 10.2.0.0 obj - 10.2.0.0 non-proxy-arp-search to itinerary
  NAT (inside, all) source static obj - 10.19.130.0 obj - 10.19.130.0 destination static obj-XXXXXXXX XXXXXXXX - obj non-proxy-arp-search to itinerary
  NAT (inside, all) source static obj - 10.19.130.0 obj - 10.19.130.0 destination static obj - 145.248.194.0 obj - 145.248.194.0 no-proxy-arp-search to itinerary
  NAT source (indoor, outdoor), obj static obj - 10.1.134.100 - 10.9.124.100
  NAT source (indoor, outdoor), obj static obj - 10.1.134.101 - 10.9.124.101
  NAT source (indoor, outdoor), obj static obj - 10.1.134.102 - 10.9.124.102
  NAT interface dynamic obj - 10.8.108.0 source (indoor, outdoor)
  NAT (inside, outside) source dynamic obj - 10.19.130.0 obj - 115.111.99.129
  NAT (inside, outside) source dynamic obj - 10.1.134.0 obj - 115.111.99.129 destination static obj - 195.254.159.133 obj - 195.254.159.133
  NAT (inside, outside) source dynamic obj - 10.1.134.0 obj - 115.111.99.129 destination static obj - 195.254.158.136 obj - 195.254.158.136
  NAT (inside, outside) source dynamic obj - 10.1.134.0 obj - 115.111.99.129
  NAT (inside, outside) source dynamic obj - 10.1.134.0 obj - 115.111.99.129 destination static obj - 209.164.192.0 obj - 209.164.192.0
  NAT (inside, outside) source dynamic obj - 10.1.134.0 obj - 115.111.99.129 destination static obj - 209.164.208.19 obj - 209.164.208.19
  NAT (inside, outside) source dynamic obj - 10.1.134.0 obj - 115.111.99.129 destination static obj - 209.164.192.126 obj - 209.164.192.126
  NAT (inside, outside) source dynamic obj - 10.8.100.128 obj - 115.111.99.130
  NAT (inside, outside) source dynamic obj - 10.10.0.0 obj - 115.111.99.132
  NAT source (indoor, outdoor), obj static obj - 10.10.1.45 - 115.111.99.133
  NAT (inside, outside) source dynamic obj - 10.99.132.0 obj - 115.111.99.129
  !
  network object obj - 172.17.10.3
  NAT (XYZ_DMZ, outside) static 115.111.99.134
  Access-group acl-outside in external interface
  Route outside 0.0.0.0 0.0.0.0 115.111.23.129 1
  Route outside 0.0.0.0 0.0.0.0 115.254.127.130 10
  Route inside 10.10.0.0 255.255.0.0 10.8.100.1 1
  Route inside 10.10.1.0 255.255.255.0 10.8.100.1 1
  Route inside 10.10.5.0 255.255.255.192 10.8.100.1 1
  Route inside 10.8.100.128 255.255.255.128 10.8.100.1 1
  Route inside 10.8.108.0 255.255.255.0 10.8.100.1 1
  Route inside 10.19.130.0 255.255.255.0 10.8.100.1 1
  Route inside 10.99.4.0 255.255.255.0 10.99.130.254 1
  Route inside 10.99.132.0 255.255.255.0 10.8.100.1 1
  Route inside 10.1.134.0 255.255.255.0 10.8.100.1 1
  Route outside 208.75.237.0 255.255.255.0 115.111.23.129 1
  Timeout xlate 03:00
  Pat-xlate timeout 0:00:30
  Timeout conn 01:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
  Sunrpc timeout 0:10:00 h323 0:05:00 h225 mgcp from 01:00 0:05:00 mgcp-pat 0:05:00
  Sip timeout 0:30:00 sip_media 0:02:00 prompt Protocol sip-0: 03:00 sip - disconnect 0:02:00
  Timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
  timeout tcp-proxy-reassembly 0:01:00
  Floating conn timeout 0:00:00
  dynamic-access-policy-registration DfltAccessPolicy
  identity of the user by default-domain LOCAL
  AAA authentication LOCAL telnet console
  LOCAL AAA authorization command
  No snmp server location
  No snmp Server contact
  Server enable SNMP traps snmp authentication linkup, linkdown cold start
  Crypto ipsec transform-set esp-aes-256 ikev1, esp-sha-hmac vpn2
  Crypto ipsec transform-set esp-aes-256 ikev1, esp-md5-hmac vpn6
  Crypto ipsec transform-set esp-aes-256 ikev1, esp-sha-hmac vpn5
  Crypto ipsec transform-set esp-aes-256 ikev1, esp-md5-hmac vpn7
  Crypto ipsec transform-set esp-aes-256 ikev1, esp-sha-hmac vpn4
  Crypto ipsec transform-set esp-aes-256 ikev1, esp-sha-hmac vpn1
  Crypto ipsec transform-set esp-aes-256 ikev1, esp-sha-hmac vpn_reliance
  Crypto ipsec transform-set esp-3des esp-md5-hmac ikev1 c2s_vpn
  86400 seconds, duration of life crypto ipsec security association
  Crypto-map dynamic dyn1 ikev1 transform-set c2s_vpn 1 set
  Crypto-map dynamic dyn1 1jeu reverse-road
  card crypto vpn 1 corresponds to the address XYZ
  card 1 set of peer XYZ Peer IP vpn crypto
  1 set transform-set vpn1 ikev1 vpn crypto card
  card crypto vpn 1 lifetime of security set association, 3600 seconds
  card crypto vpn 1 set security-association life kilobytes 4608000
  correspondence vpn crypto card address 2 DON'T
  2 peer NE_Peer IP vpn crypto card game
  2 set transform-set vpn2 ikev1 vpn crypto card
  3600 seconds, duration of life card crypto vpn 2 set security-association
  card crypto vpn 2 set security-association life kilobytes 4608000
  card crypto vpn 4 corresponds to the address ML_VPN
  card crypto vpn 4 set pfs
  vpn crypto card game 4 peers ML_Peer IP
  4 set transform-set vpn4 ikev1 vpn crypto card
  3600 seconds, duration of life card crypto vpn 4 set - the security association
  card crypto vpn 4 set security-association life kilobytes 4608000
  vpn crypto card 5 corresponds to the address XYZ_global
  vpn crypto card game 5 peers XYZ_globa_Peer IP
  5 set transform-set vpn5 ikev1 vpn crypto card
  3600 seconds, duration of life card crypto vpn 5 set - the security association
  card 5 security-association life set vpn crypto kilobytes 4608000
  vpn crypto card 6 corresponds to the address Da_VPN
  vpn crypto card game 6 peers Da_VPN_Peer IP
  6 set transform-set vpn6 ikev1 vpn crypto card
  3600 seconds, duration of life card crypto vpn 6 set - the security association
  card crypto vpn 6 set security-association life kilobytes 4608000
  vpn crypto card 7 corresponds to the address Da_Pd_VPN
  7 peer Da_Pd_VPN_Peer IP vpn crypto card game
  7 set transform-set vpn6 ikev1 vpn crypto card
  3600 seconds, duration of life card crypto vpn 7 set - the security association
  card crypto vpn 7 set security-association life kilobytes 4608000
  vpn outside crypto map interface
  crypto map vpn_reliance 1 corresponds to the address XYZ_rim
  card crypto vpn_reliance 1 set of peer XYZ_rim_Peer IP
  card crypto 1 ikev1 transform-set vpn_reliance set vpn_reliance
  vpn_reliance card crypto 1 lifetime of security set association, 3600 seconds
  card crypto vpn_reliance 1 set security-association life kilobytes 4608000
  card crypto vpn_reliance interface outside_rim
  dynamic mymap 1 dyn1 ipsec-isakmp crypto map
  crypto isakmp identity address
  No encryption isakmp nat-traversal
  Crypto ikev1 enable outside_rim
  Crypto ikev1 allow outside
  IKEv1 crypto policy 1
  preshared authentication
  aes-256 encryption
  sha hash
  Group 5
  lifetime 28800
  IKEv1 crypto policy 2
  preshared authentication
  aes-256 encryption
  sha hash
  Group 5
  life 86400
  IKEv1 crypto policy 4
  preshared authentication
  aes-256 encryption
  sha hash
  Group 5
  life 28000
  IKEv1 crypto policy 5
  preshared authentication
  aes-256 encryption
  sha hash
  Group 2
  life 86400
  IKEv1 crypto policy 100
  preshared authentication
  3des encryption
  sha hash
  Group 2
  life 43200
  IKEv1 crypto policy 65535
  preshared authentication
  3des encryption
  sha hash
  Group 2
  life 86400
  Telnet 10.8.100.0 255.255.255.224 inside
  Telnet timeout 5
  SSH timeout 5
  SSH group dh-Group1-sha1 key exchange
  Console timeout 0
  no basic threat threat detection
  no statistical access list - a threat detection
  no statistical threat detection tcp-interception
  internal XYZ_c2s_vpn group strategy
  username testadmin encrypted password oFJjANE3QKoA206w
  tunnel-group XXXXXXXX type ipsec-l2l
  tunnel-group ipsec-attributes XXXXXXXX
  IKEv1 pre-shared-key *.
  tunnel-group XXXXXXXXtype ipsec-l2l
  tunnel-group XXXXXXXXipsec-attributes
  IKEv1 pre-shared-key *.
  tunnel-group XXXXXXXX type ipsec-l2l
  tunnel-group ipsec-attributes XXXXXXXX
  IKEv1 pre-shared-key *.
  tunnel-group XXXXXXXX type ipsec-l2l
  tunnel-group ipsec-attributes XXXXXXXX
  IKEv1 pre-shared-key *.
  tunnel-group XXXXXXXX type ipsec-l2l
  tunnel-group ipsec-attributes XXXXXXXX
  IKEv1 pre-shared-key *.
  tunnel-group XXXXXXXX type ipsec-l2l
  tunnel-group ipsec-attributes XXXXXXXX
  IKEv1 pre-shared-key *.
  tunnel-group XXXXXXXX type ipsec-l2l
  tunnel-group ipsec-attributes XXXXXXXX
  IKEv1 pre-shared-key *.
  type tunnel-group XYZ_c2s_vpn remote access
  attributes global-tunnel-group XYZ_c2s_vpn
  address pool XYZ_c2s_vpn_pool
  IPSec-attributes tunnel-group XYZ_c2s_vpn
  IKEv1 pre-shared-key *.
  !
  class-map inspection_default
  match default-inspection-traffic
  !
  !
  type of policy-card inspect dns preset_dns_map
  parameters
  message-length maximum 512
  Policy-map global_policy
  class inspection_default
  inspect the preset_dns_map dns
  inspect the ftp
  inspect h323 h225
  inspect the h323 ras
  inspect the netbios
  inspect the rsh
  inspect the rtsp
  inspect the skinny
  inspect esmtp
  inspect sqlnet
  inspect sunrpc
  inspect the tftp
  inspect the sip
  inspect xdmcp
  inspect the icmp
  Review the ip options
  !
  global service-policy global_policy
  level 3 privilege see the running-config command exec mode
  logging of orders privilege see the level 3 exec mode
  privilege see the level 3 exec mode command crypto
  context of prompt hostname
  no remote anonymous reporting call
  call-home
  Profile of CiscoTAC-1
  no active account
  http https://tools.cisco.com/its/service/oddce/services/DDCEService destination address
  email address of destination [email protected] / * /
  destination-mode http transport
  Subscribe to alert-group diagnosis
  Subscribe to alert-group environment
  Subscribe to alert-group monthly periodic inventory
  monthly periodicals to subscribe to alert-group configuration
  daily periodic subscribe to alert-group telemetry
  Cryptochecksum:caa7476cd348ed89b95d37d4e3c9e1d8
  : end

  XYZ #.

  Good news

  Follow these steps:

  network object obj - 172.30.10.0_24

  172.30.10.0 subnet 255.255.255.0

  !

  the LOCAL_NETWORKS_VPN object-group network

  object-network 1.1.1.0 255.255.255.0

  !

  NAT (inside, outside) 1 static source LOCAL_NETWORKS_VPN destination LOCAL_NETWORKS_VPN static obj - 172.30.10.0_24 obj - 172.30.10.0_24 - route search

  * Where 1.1.1.0/24 is the internal network that you want to reach through the tunnel.

  Keep me posted.

  Thank you.

  Please note all messages that will be useful.

• How to change the ASA and ASDM on ASA5505 questioned once

  Can anyone suggest the way to upgrade the software on the Cisco ASA5505 simultaneously both ASA and ASDM without trouble, like I just did?

  Here is what happened.  I copied the files asa821 - k8.bin and asdm - 621.bin for flash memory, then renamed the old versions like Oasa724 - k8.bin and Oasdm - 524.bin and then issued the command reload from the GUI of Windows.

  Big mistake, I lost connectivity ASDM entirely and has been obliged to buy a USB to serial port adapter and plug the cable from port of CLI command so she can return to the unit.  I found that he was running the kernel asa821 - k8.bin, as expected, but apparently the ASDM was still under the version 5.24.

  Should I have created a new folder and moved the older versions of this file, then issued the command reload system and hope for the best?

  I feel that I've defiled things upwards, I guess I have to use tftp to reload the boot image to get the ASA5505 back up again (using the ROMMON commands)

  In fact, the only way that I was able to recover the GUI of Windows used start to asa724 image - k8.bin older command.

  What is the right way to upgrade to new versions asa 8.2 (1) and asdm 6.2 (1)?

  Really, I don't want to risk losing my ability to speak with this box and I spent an anxious afternoon yesterday, when I got to the pop-up message box "can not display the asdm manager."

  ======

  After working with the CLI port, I noticed the following error:

  Set of images of Manager devices, but unable to find disk0: / asdm - 524.bin
  Out of config line 75, "asdm image disk0: / asdm-5...» »

  So apparently some configuration file must point to the correct asdm and just blindly change the files in the folder will NOT work.

  ========

  After working more with the port of the CLI and the GUI of Windows port, I found that the 'asdm image' command did NOT work in the CLI software, but was apparently working in the GUI software, so I ran this command to tell the system to use the recent 6.21 on start.

  After that and issuing the command reload of the CLI, I was able to set up successfully with the latest software of asa and asdm.

  I would like to have access to CLI is valuable in this case.

  I DON'T know why the command 'asdm image' appears inaccessible on the CLI port.

  Any ideas?

  As far as I'm concerned this problem has been resolved (using educated error)

  The boot of the ASA when he tries to use the command 'system startup' file in the config. If it is not very well this file (it was not there because you renamed it), it starts the first image he will find...

  However for ASDM ASA uses just the image you have. You were pointing to asdm5.2 and renamed, there was no valied ASDM image to use.

  In other words you must have just changed the 'asdm image"and"system start"commands in the config and point to new files, save the configuration and restart and then it would have worked fine.

  I hope it helps.

  PK

• Newspapers of the ASA

  I try to display the traffic logs. Can someone help me with the command?

  Here are the steps to install syslog server.

  First of all, you need to install syslog on a computer server software. You can

  Download one of the popular kiwisyslog Server

  http://www.kiwisyslog.com/software_downloads.htm . He is listed as Kiwi

  Syslog Daemon and the latest version is 8.2.8. You can download the standard edition, which works as

  a program.

  Once the syslog server is installed, then you should connect to the ASA in

  the terminal configuration mode and enter the following commands.

  Logging host [in_if_name] ip_address

  (example: host inside 1.2.3.4 record)

  We assume syslog server is installed on the computer with 1.2.3.4 IP address in the

  inside the network.)

  timestamp of the record

  exploitation forest siphon 4

  opening of session

  These commands allow the ASA begin sending messages syslog on the syslog server.

  For more information about the logging commands, you can see at this URL:

  http://www.Cisco.com/en/us/products/sw/secursw/ps2120/products_command_refer

  ence_chapter09186a008010578b.html #1028090

  ----------------------------------------------------------------------------------

  Levels of trap

  . 0-emergency-system unusable messages

  . 1-alerts-take immediate action

  2 State - criticism-criticism

  . 3 errors error message

  . 4 warnings-Warning message

  . 5 notifications-Normal but significant condition

  message information. 6-Information

  . 7-debug-Debug messages and orders of FTP and WWW URL log

  Note the useful messages.

  Kind regards

  Sushil

• Content of the ASA CX filtering, looking for suggestions

  I wanted to get some feedback on how the rest of you the security people do web content filtering.

  The CX did a great job with HTTP but when it comes to HTTPS there leaves a lot to desire. When the CX first went live, it was configured to decrypt all the HTTPS traffic and deny transactions to servers "to the aid of a certificate not approved" and "If the secure session handshaking fails" lit.

  Immediately, I started to implement the policy of 'do not read' and it worked very well for most of the sites affected by issues of HTTPS decryption. Other sites required certificate HTTPS imported to the CX for it to work.

  However, due to the constant "error: 140920E3:SSL routines: SSL3_GET_SERVER_HELLO:parse tlsext" I experimented with different work a rounds until I found these articles.

  http://www.exploresecurity.com/the-small-print-for-OpenSSL-legacy_renego...

  https://www.digicert.com/news/2011-06-03-SSL-renego.htm

  ATC suggestion was to create a deny statement (with the help of a group of objects that defines the ENTIRE domain name) at the top of the ACL that send traffic to the ASA to the CX. It was the only way to keep the CX deny "using a certificate not approved" and "If the secure session handshaking fails" decryption settings turned on.

  Now I feel I'm back to square one, as the number of exceptions have grown exponentially. This led me to believe that I need to return to the path of the content filtering is implemented. My goal is to apply a simple and scalable solution. As I see it, I can continue to add to the list of exemptions "ASA to CX", is not a scalable solution, because it requires all FQDN to be defined (e.g. bank.com, server1.bank.com, server2.bank.com, etc.). The alternative is to relax the decryption CX configurations which I think is the equivalent to remove the airbags in a car for weight reduction to make it faster.

  Any input would be appreciated!

  I came to the conclusion that SSL decryption is no longer possible, where a robust PKI was deployed in a company. Even in this case we would ideally use a dedicated appliance SSL decryption, so we can give the CX (or ASA with firepower service module) good old http for inspection.

  The right software modules do not have the processing power to line decryption rate for everything, but the more modest rate of return.

  In addition, the CX is now removed for modules of firepower, so you won't see any significant new addressing this gap on the CX.

• Error message 5545 ASA Cisco: % ASA-3-210007: READ allocate xlate failed

  Hello team,

  We have 2 firewall Cisco ASA, active failover / standby.

  the waiting for firewall, we see this error message "% ASA-3-210007: READ allocate xlate failed.

  This error message is related to the bug?

  Thank you for your help,

  Best regards

  Yunus Saleh

  Hi Younous,

  This error on the rescue unit could be associated with a problem of memory on the device or memory full on the device.

  IF these options are not confirmed, we can consider that your devices version is bug hit.

  https://Tools.Cisco.com/bugsearch/bug/CSCub94479/?referring_site=bugquic...

  BTW, you send us the "sh version" of your device.

  If your version is 'old' or connected to the version mentioned in the BUG system, is high suggests updating your device.

  In a law/stb Setup, are also "0 downtime" and updated easy both devices

  Let me know

  Matteo

  Please rate me if the post was beneficial for your solution / questions

• Access to the ASA 5515 IPS administration

  Hello!

  I can not access the ASA IPS module.

  I try to ASDM. Configuration-> IPS. I type user name and password, see following message: "error connecting to the sensor. Error loading sensor.

  Could you please help me fix my config?

  I have the topology of the network like this

  http://www.Cisco.com/image/gif/paws/113690/IPS-config-mod-01.gif

  My config

  KR - ASA # sh run concert int 0/5

  !

  interface GigabitEthernet0/5

  nameif inside

  security-level 100

  IP 172.33.1.253 255.255.255.0 watch 172.33.1.254

  !

  interface Management0/0

  management only

  No nameif

  security-level 0

  no ip address

  !

  KR - ASA # sh details ips module

  App name: IPS

  App status. : to the top

  App Status / / Desc: Normal operation

  App version: 4,0000 E4

  Flight status data: to the top

  Status: to the top

  License: IPS active Module perpetual

  Mgmt IP addr: 172.33.1.251

  MGMT network mask: 255.255.255.0

  Mgmt gateway: 172.33.1.253

  MGMT access list: 172.33.1.0/24

  MGMT access list: 172.34.1.0/24

  Web to MGMT ports: 443

  Mgmt TLS enabled: true

  !

  KR - ASA # ping 172.33.1.251

  Type to abort escape sequence.

  Send 5, echoes ICMP 100 bytes to 172.33.1.251, wait time is 2 seconds:

  !!!!!

  Success rate is 100 per cent (5/5), round-trip min/avg/max = 10/10/10 ms

  !

  permit same-security-traffic inter-interface

  permit same-security-traffic intra-interface

  !

  Thank you!

  Hi Vladimir,.

  Yups, this is an issue that is seen. Downgrade of Java should solve the problem. If this is not the case, turn on java debugging logs and paste those here:

  Go to control panel-> java right click-> Open-> Advanced-> check all the boxes that appear under debugging and click the radio button to see the console

  Rerun the IDM in browser and collect data in the java console window and paste it here.

  -

  Kind regards

  Sourav Kakkar

• AnyConnect Cert warning error when the xml file is changed.

  Hello world

  We have valid CA cert and it is installed successfully on the ASA ASA associate outside the interface.

  When you use ipsec IKeV2 with any connection pre deployment anyconnect when I change the anyconnect on ASA and user profile

  connects the first time, he gets the warning below

  Untrusted security VPN server certificate warning

  The options are

  Connect anyway cancel connection

  I click on connect anyway and anyconnect is connected.

  Checked that CN has the FQDN value.

  We do not use SSL certificate.

  When I connect the second time above cert error warning do not come.

  This warning cert error only comes when the changes are made to the anyconnect profile and the user connects again to the AAS.

  We do not use cert based authentic.

  Any ideas how I can fix this problem?

  Concerning

  MAhesh

  You can remove and reinstall the certificate authority. It will require that first delete you the configured services dependent thereon, binding to the interface etc..

  I am not convinced that would fix what you see, and it would not be my first choice.

  First, I would check things like why don't not the client approves the certificate (audit for example simply by accessing the interface of the ASA and see what your browser indicates that the question (both Firefox and Chrome are very useful in telling you of any problem with the certificate if you expand the details), what is the content of the profile and changes) the etc.

  You can open a TAC case?

• two DMVPN rays behind the ASA made hide NAT for Internet

  This scenario requires that the particular configuration of the ASA? Until now, the installation program does not work, we face the following problem:

  The nodal point DMVPN shows an error "invalid SPI", because the two rays to come with the same IP address (ASA hide-NAT) to the DMVPN hub.

  THX

  Holger

  Using an IP address for the two rays?  This is not going to work

• CoreTelephony error in trace file as a file for coretelephony tracing operation has failed, perhaps you need more disk space. Details "error opening the file/tmp/ct.shutdown, err = operation not permitted

  I got this error:

  "CoreTelephony Trace file error
  A file for CoreTelephony tracing operation failed, you might run out of disk space. Details "error opening the file/tmp/ct.shutdown, err = operation not permitted"

  I tried to solve it by searching for CoreTelephony errors. Could not resolve yet.
  Software does not, especially of photoshop...

  Any ideas?

  Same thing here, iMac with OS X 10.11.6. All started a couple days ago. Have not found any valid solution online yet, I tried rebooting in recovery mode and check disk, but it seems that everything is ok with the drives and permissions.

• Sync repeatedly presents the sync error, indicating the name/password of wrong account

  I get this error whenever I closed and reopened Firefox 38.0.1. I tried the solutions recommended in https://support.mozilla.org/en-US/questions/1063033, and they do not work. To enable synchronization, I must click on Preferences in the error (at the bottom of the window) and connect to synchronize manually. My FF is set up to always use the InPrivate browsing and do not save passwords. I use an automated password/login application called LastPass. However, the problem with the sync seems to have started in the last two weeks. The error repeats itself everytime I open a new window.

  Yes, it should work.

• Time Machine - there was an error preparing the Time Machine backup drive (could not mount the drive)

  I have a new HD but cannot set up encryption with system preferences. After ten minutes, I get the following error message:

  "There was an error preparing the Time Machine backup disk (disc name) - could not mount drive"

  Apparently, I need to set up the HD in this way:

  • If you are using an external drive connected to your Mac, use disk utility to make sure that your backup disk is formatted in HFS + extended (journaled) and is the partition type GUID Partition Table (GPT)

  It is not an option for the HFS + and so I used; OS x EXTENDED (journaled). GUID is ok.

  Can someone let me know what I need to do.

  Thank you

  Formatting: GUID Partition Table, OS X Extended (journaled).    (it is HFS +)

  For TimeMachine at best to a partition only.

  Do it again if necessary, then disconnect, reconnect, Start Time Machine preferences and "select disk".

• When I try to print anything in Firefox, email or the Internet, I get a message that says: error in the printer and nothing prints. Tried the stuff even printing from the Internet

  When I try to print anything in Firefox, email or the Internet, I get a message that says: error in the printer and nothing prints. Tried to print things even to Internet Explorer, it works fine.

  Hello bdoolen, please try to reset firefox and see if that can solve the problem...

• I received a bound book, but there is an error on the cover. It can be corrected?

  I ordered and received a bound book. There is an error on the cover. How can this be repaired?

  Hello

  Contact Apple directly > http://www.apple.com/support/mac-apps/contact/

• There was an error in the App Store. Please try again later. (20)

  After you have created a new Apple ID (my previous one makes use of an e-mail address that no longer exists) and change the password (for security), I tried to download an update from the App Store. First, I got the message: 'there was an error in the App Store. Please try again later. (20)". Now, I'm getting "update not available with this Apple ID - this update is not available for this Apple ID either because it was bought by another user or the item has been refunded or cancelled.»

  I deleted all cookies, caches, disconnected, connected again, power and turn it on again and waited.

  The problem persists.

  What should I do?

  Please log out of the App Store and reconnect. Try to update again. If there is no change, you can try to update an application that has been purchased (or free downloaded for free) using an another Apple ID check your purchase history to see if the app is included. If it isn't, you will have either to connect with the ID used to buy it, or remove it and buy it again - and Yes, you will have to pay again.