topic Re: need help with ASA 5512 configuration in Network Security

need help with ASA 5512 configuration

tranatisoc — Fri, 21 Feb 2020 14:17:48 GMT

Hi - i'm novice to asa configuration. please could someone help me with performing the following:

https://support.zoom.us/hc/en-us/articles/201362683-Network-Firewall-or-Proxy-Server-Settings-for-Zoom

thanks in advance

Re: need help with ASA 5512 configuration

jumora1 — Tue, 12 Sep 2017 11:55:12 GMT

please attach the configuration and detail on your issue

Re: need help with ASA 5512 configuration

tranatisoc — Tue, 12 Sep 2017 11:56:57 GMT

I need to add this to my config:

TCP

80,443

All Zoom Clients

*.zoom.us

TCP

443, 8801, 8802

All Zoom Clients

8.5.128.0/23
52.202.62.192/26
64.211.144.0/24
69.174.57.0/24
115.114.131.0/26
162.12.232.0/22
162.255.36.0/22
192.204.12.0/22
202.177.207.128/27
202.177.213.96/27
204.141.28.0/22
209.9.211.0/24
213.19.144.0/24
213.19.153.0/24
221.122.88.128/25
221.122.89.128/25

and so on.

Re: need help with ASA 5512 configuration

jumora1 — Tue, 12 Sep 2017 12:06:41 GMT

By default the ASA does not block traffic from the inside interface out.

Can you get a copy of the configuration of the ASA so I can check from which interface behind the ASA you are coming from and if you have any filtering rules that could be blocking you.

Re: need help with ASA 5512 configuration

tranatisoc — Tue, 12 Sep 2017 12:25:47 GMT

I'm trying to figure out how to copy my config. two questions:

1) is it safe to post config on public forum such as this?

2) does my config contain any sensitive data such as passwords?

Re: need help with ASA 5512 configuration

jumora1 — Tue, 12 Sep 2017 12:28:34 GMT

passwords are encrypted you can XXX out anything related to IP addresses and routes but if you feel this is sensitive information please open a TAC case.