topic ASA Configuration .. in Network Security

ASA Configuration ..

richard_steiner — Tue, 12 Mar 2019 05:38:29 GMT

Hi Guys,

I am new to cisco ASA firewall and need help configuring one ..I am trying to NAT 2 LAN IP addresses to Public IP addresses on ports 25 and 443.

LAN IP	PUBLIC IP	PORT
192.168.0.7	41.222.40.62	25, 443
192.168.0.8	41.222.40.37	25, 443

Attached is a copy of my config, I will greatly appreciate corrections where applicable.

Cheers,

Richard

Hi,

Vibhor Amrodia — Sat, 14 Mar 2015 10:56:56 GMT

Hi,

NAT statements:-

static (dmz,outside) tcp 41.222.40.37 https 192.168.0.8 https netmask 255.255.255.255
static (dmz,outside) tcp interface https 192.168.0.7 https netmask 255.255.255.255
static (dmz,outside) tcp 41.222.40.37 smtp 192.168.0.8 smtp netmask 255.255.255.255
static (dmz,outside) tcp interface smtp 192.168.0.7 smtp netmask 255.255.255.255

These rules look good.

ACL:-

access-list Out-Dmz permit tcp any interface outside eq 443

access-list Out-Dmz permit tcp any interface outside eq 25

access-list Out-Dmz permit tcp any host 41.222.40.37 eq 443

access-list Out-Dmz permit tcp any host 41.222.40.37 eq 25

access-group Out-Dmz in interface outside

Thanks and Regards,

Vibhor Amrodia

Hi Vibhor,Are you advising

richard_steiner — Sun, 15 Mar 2015 08:05:56 GMT

Hi Vibhor,

Are you advising that I update my access list with the above?

Thank you so much for your time.

~Richard