topic Simple Telnet question on ASA in Network Security

Simple Telnet question on ASA

AQUALUNGAMERICA — Tue, 12 Mar 2019 01:23:13 GMT

On an ASA Firewall, I am using 8.4(5). Is Telnet disabled by default? I only want to use SSH from an inside interface which I know how to configure using the AAA command and establishing an RSA Modulus key.

Thank you

Carlos

Re: Simple Telnet question on ASA

Jouni Forss — Wed, 03 Apr 2013 22:21:05 GMT

Hi,

To my understanding the Telnet isnt allowed by default.

But more importantly there is a very specific limitation related to its use that applys always.

You CANT use telnet on the "outside" interface with "security-level 0" UNLESS that Telnet connection is coming inside a VPN connection (VPN Client or L2L VPN)

This limitation is because unlike SSH, Telnet naturally aint secure by itself.

- Jouni

Simple Telnet question on ASA

jocamare — Wed, 03 Apr 2013 22:21:40 GMT

Telnet and SSH disabled by default.

So, rest assured, you can just enable SSH and telnet will remain disabled.

Simple Telnet question on ASA

AQUALUNGAMERICA — Wed, 03 Apr 2013 22:24:23 GMT

Jouni,

Thank you for the reply and the lesson. Much appreciated.

Simple Telnet question on ASA

Jouni Forss — Wed, 03 Apr 2013 22:28:48 GMT

No problem,

Please mark the question as answered or ask more if needed

- Jouni