topic Foreign address 0.0.0.0:* under show asp table socket in Network Security

Foreign address 0.0.0.0:* under show asp table socket

mahesh18 — Tue, 12 Mar 2019 02:15:55 GMT

Hi everyone,

When i ssh to ASA and ran the command

show asp table socket i see below

show asp table socket

Protocol Socket    Local Address               Foreign Address         State
SSL       000035c4 192.168.100.3:443            0.0.0.0:*               LISTEN
TCP       00005d5c 192.168.100.3:22             0.0.0.0:*               LISTEN
TCP       00006f5c 192.168.101.3:22             0.0.0.0:*               LISTEN
TCP       00009314 192.168.2.3:22               0.0.0.0:*               LISTEN
TCP       2f9ea0f4 192.168.101.3:22             192.16.3.5:55746        ESTAB

Where under foreign address i can see my pc address 192.168.3.5.

Need to know why other foreign address are showed as 0.0.0.0*??

will by default ASA will always show 4 foreign address as 0.0.0.0*?

Regards

Mahesh

Foreign address 0.0.0.0:* under show asp table socket

Rudy Sanjoko — Tue, 23 Jul 2013 16:01:23 GMT

Hi,

It seems that you are opening port 443 and 22 on your ASA. This can be checked by using below commands:

- show run http

- show run ssh

I don't think by default it will show any open port. This is because by default the behaviour on ASA is that all ports are close and you have to open port that you want to open/use. Which on router, it's the opposite, by default all ports are open.

HTH,

Foreign address 0.0.0.0:* under show asp table socket

mahesh18 — Tue, 23 Jul 2013 17:09:23 GMT

Hi Rudy,

Regards

MAhesh