topic Hi BHconsultants88@, in Network Security

ASA ACLs

BHconsultants88 — Tue, 12 Mar 2019 09:41:50 GMT

Hi guys, I hope someone can help. I need to do the following actions on the attached ASA

* Block all Internet from LAN

* Block all connections to 10.56.0.0 /16

* Block all connections to 10.57.0.0 /16

* Allow connections from LAN to 10.56.40.195/32, 10.56.40.196/32, 10.56.40.197/32, 10.56.40.198/32, 10.56.40.199/32, 10.56.40.200/32

Could someone help me out with how I should configure the ACLs?

Thank you 🙂

Hi BHconsultants88@,

Spooster IT Services — Thu, 13 Jul 2017 19:20:38 GMT

Hi BHconsultants88@,

Can you let me know where 10.56.0.0/16 and 10.57.0.0/16 subnets are?

These are not directly connected to ASA and there is no route for these subnets.

Do you want to block internet access to LAN ?

Do you want to block connections from LAN to 10.56.0.0/16 & 10.57.0.0/14?

Do you only want to allow traffic from LAN to the followin specific IP's 10.56.40.195/32, 10.56.40.196/32, 10.56.40.197/32, 10.56.40.198/32, 10.56.40.199/32, 10.56.40.200/32?

Hi, thanks for the reply. The

BHconsultants88 — Thu, 13 Jul 2017 20:18:10 GMT

Hi, thanks for the reply. The 10.56 and 10.57 networks are both in HQ. There's VPN tunnel config that's not in the attached, config - these subnets are connected via the tunnel

To clarify, this is what I need (slightly different to above)

Block internet from source 10.154.246.12

Allow Internet from rest of LAN

Block access to 10.56 and 10.57 networks from 10.154.246.12 host

Allow traffic from LAN to the followin specific IP's 10.56.40.195/32, 10.56.40.196/32, 10.56.40.197/32, 10.56.40.198/32, 10.56.40.199/32, 10.56.40.200/32?