ASA Firewall Services

Daniel Smith — Tue, 12 Mar 2019 05:11:24 GMT

Under the NERC CIP program, we must identify all open services on our ASA firewalls. By open services, I mean anything that the firewall might accept and terminate an IP connection for. This would not apply to connections through the firewall. Since the firewall cannot be effectively scanned with a port scanner, we have resorted to searching for the presence of commands that are known to enable services. At this time, I believe our approach is weak, and does not capture all services, or needlessly searches for config text that does not actually enable a service. I am hoping to assemble a list of all services that an ASA can offer and the commands that enable those services. Your suggestions would be great.

Hi,My short and simple reply

Vibhor Amrodia — Fri, 05 Dec 2014 14:44:58 GMT

Hi,

My short and simple reply to find all the ports/Services that the ASA device might reply to would be listed in both these configuration components:-

1) show asp table socket

2) NAT statement which use port forward on the Interface IP on any of the ASA device interfaces.

Thanks and Regards,

Vibhor Amrodia

topic Hi,My short and simple reply in Network Security

ASA Firewall Services

Hi,My short and simple reply