https://community.cisco.com/t5/network-security/port-forwarding/m-p/2972023#M147907 <P>object service rdp<BR /> service tcp source eq 3389---This should be destination instead of source </P> Mon, 09 Jan 2017 13:31:31 GMT Pranay Prasoon 2017-01-09T13:31:31Z https://community.cisco.com/t5/network-security/port-forwarding/m-p/2972022#M147905 <P></P> <P>Hello,</P> <P>I'm trying to forward the rdp port from a Cisco asa 5512x, version ASA 9.6</P> <P></P> <P>object service rdp<BR /> service tcp source eq 3389</P> <P>object network mypc<BR /> host 10.27.1.164</P> <P>access-list outside_access_in extended permit object rdp any object mypc</P> <P>object network mypc<BR /> nat (inside,outside) static interface service tcp 3389 3389<BR />!<BR />nat (inside,outside) after-auto source dynamic net-mihai interface<BR />access-group outside_access_in in interface outside<BR /><BR /></P> <P>The PAT rule is after the port forwarding..&nbsp;</P> <P>Remote desktop works perfectly inside LAN, the external ports are not blocked by ISP or Windows firewall</P> <P></P> <P>I checked the Cisco examples, with no success</P> <P></P> <P>( <A href="http://www.cisco.com/c/en/us/support/docs/ip/network-address-translation-nat/118996-config-asa-00.html" target="_blank">http://www.cisco.com/c/en/us/support/docs/ip/network-address-translation-nat/118996-config-asa-00.html</A> )</P> <P></P> <P>Any ideas?</P> <P></P> <P>Thanks in advance,</P> <P>M</P> Tue, 12 Mar 2019 08:45:10 GMT https://community.cisco.com/t5/network-security/port-forwarding/m-p/2972022#M147905 Mihai Ion 2019-03-12T08:45:10Z https://community.cisco.com/t5/network-security/port-forwarding/m-p/2972023#M147907 <P>object service rdp<BR /> service tcp source eq 3389---This should be destination instead of source </P> Mon, 09 Jan 2017 13:31:31 GMT https://community.cisco.com/t5/network-security/port-forwarding/m-p/2972023#M147907 Pranay Prasoon 2017-01-09T13:31:31Z