topic Re: Help to configure port translation for RDP in Network Security

Help to configure port translation for RDP

GoldTipu — Sat, 21 Nov 2020 16:22:15 GMT

Hello All

I am new here so i need some help .

I have a RDP Server inside (LAN ) (192.168.1.73)

I have a Cisco ASA inside (192.168.1.1)

I wanted to access the RDP server from outside

But NOT from the default port .......... i want to use 4488 port from outside

(See screen shot )

Like if i do RDP from outside on port 4488

i want ASA to translated to RDP port 3389 and directed to my RDP server inside.

I have already opened port 4488 in my firewall

(See screen shot )

How can configure NAT rule ?

so i can access my RDP server from outside on port 4488 and it will be automatically redirected to RDP 3389 ?

Please guide me on ASDM (I am new with this firewall )

Regards

Re: Help to configure port translation for RDP

balaji.bandi — Sat, 21 Nov 2020 17:27:18 GMT

below command level should able to give you what you looking :

object network RDP-Host
host 192.168.1.73

access-list outside_access_in extended permit object RDP any any

object network RDP-Host
nat (any,outside) static interface service tcp 4488 3389

Re: Help to configure port translation for RDP

GoldTipu — Sat, 21 Nov 2020 19:13:48 GMT

Thank you here is CLI output.

ciscoasa(config)# object network RDP-Host
ciscoasa(config-network-object)# host 192.168.1.73
ciscoasa(config-network-object)#
ciscoasa(config-network-object)# access-list outside_access_in extended permit$
WARNING: <outside_access_in> found duplicate element
ciscoasa(config)#
ciscoasa(config)# object network RDP-Host
ciscoasa(config-network-object)# nat (any,outside) static interface service tc$
ciscoasa(config-network-object)#

but when i am trying RDP from ouside on port 4488 it failed .

screen shot .

please advise .

Re: Help to configure port translation for RDP

GoldTipu — Sat, 21 Nov 2020 19:24:48 GMT

i changed this and its working ............. SUPER THANKS.............

object network RDP-Host
nat (any,outside) static interface service tcp 3389 4488

Re: Help to configure port translation for RDP

balaji.bandi — Sat, 21 Nov 2020 20:12:57 GMT

Glad all working, I may be miss-typed otherway around, good you able to figure it out. thank you for the resolution.