topic You should access the in Network Security

TCP access denied by ACL

Nico M — Tue, 12 Mar 2019 08:23:38 GMT

Hallo everybody.

I'm having this issue if I try to set up my internal Web Server.

I have:

outside network IP 10.0.0.100 (Dynamic)

inside network IP 192.168.1.0/24

web server IP 192.168.1.5

I've set up Nat general access:

True

any

tcp

Permit

Default

[]

and

ACL with no limitations:

True

any

tcp

Permit

Default

[]

and I keep getting this log ERROR once i call my Web server from outside IP 10.0.0.101

Oct 13 2016

11:29:52

10.0.0.101

63375

10.0.0.100

TCP access denied by ACL from 10.0.0.101/63375 to outside:10.0.0.100/80

Am I missing something?

Thank you in advance.

Nico

Pawan Raut — Thu, 13 Oct 2016 10:08:18 GMT

You should access the internal IP 192.168.1.5 and no the interface IP 10.0.0.100

Nico M — Thu, 13 Oct 2016 10:49:57 GMT

Sorry, I do not understand.

What should I do?

Normally you call the outside network of the ASA in order to access the firewall to reach the internal server.

The internal server 192.168.1.5 is not visible to the outside network. It has to be translated.