topic Hi in Network Security

HTTPS Port 443

Qzafar712 — Tue, 12 Mar 2019 07:39:10 GMT

I do not have much experience with firewall side of things, there for I had a question with regards to what I am trying to do.

I have enabled Direct Access on Windows Server 2012, for DA to work it uses HTTPS port 443.

How do I open or enable Direct Access to be able get in and out. Also ASDM is also using Port 443. Any thoughts?

to allow access to ther DA

Marius Gunnerud — Thu, 21 Apr 2016 19:03:11 GMT

to allow access to ther DA server from the internet you would need to do the following (NAT configuration is dependent on ASA version you are running):

object network NAT-DASERVER

host 1.2.3.4

object network DASERVER

host 10.10.10.10

nat (inside,outside) static NAT-DASERVER service tcp 443 443

http server enable 4433 <-- changes ASDM port to 4433

Please remember to select a correct answer and rate helpful posts

Hi

Qzafar712 — Wed, 27 Apr 2016 16:41:27 GMT

Thank you for the information.

When I try that I get a error at the following.

I was able to change the ASDM Port also.

C5512(config)# object network DAserver-int
C5512(config-network-object)# host 10.X.X.X
C5512(config-network-object)# nat (inside,outside) static 174.X.X.X
^
ERROR: % Invalid input detected at '^' marker.
C5512(config-network-object)# object network DAserver-ext
C5512(config-network-object)# host 174.X.X

^
ERROR: % Invalid Hostname
C5512(config-network-object)# host 174.X.X.X
C5512(config-network-object)# nat (inside,outside) static DAserver-ext se$

nat (inside,outside) static DAserver-ext service tcp 443 443
^
ERROR: % Invalid input detected at '^' marker.
C5512(config-network-object)# nat (inside,outside) stat DAserver-ext serv$

nat (inside,outside) stat DAserver-ext service tcp 443 443

What version ASA are you

Marius Gunnerud — Mon, 02 May 2016 11:17:50 GMT

What version ASA are you running

Please remember to select a correct answer and rate helpful posts

Hi Marius

Qzafar712 — Tue, 03 May 2016 13:35:27 GMT

Hi Marius

The ASA version is 9.5(2)2.

Device is ASA5512

Are your interfaces named

Marius Gunnerud — Thu, 05 May 2016 09:49:53 GMT

Are your interfaces named inside and outside?

Also, the following is incorrect configuration as 174.x.x.x is not an IP on the inside network:

C5512(config-network-object)# host 174.X.X.X
C5512(config-network-object)# nat (inside,outside) static DAserver-ext se$

Please remember to select a correct answer and rate helpful posts

Interfaces are called MGMT

Qzafar712 — Wed, 18 May 2016 18:24:41 GMT

Interfaces are called MGMT and PROD.

Then that is where your issue

Marius Gunnerud — Fri, 20 May 2016 20:35:18 GMT

Then that is where your issue is with regards to the invalid input error. the format should be:

nat (real_int,mapped_int)

Please remember to select a correct answer and rate helpful posts