<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Internet access in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/internet-access/m-p/2189152#M386980</link>
    <description>&lt;P&gt;Hi,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Port forwarding done to a DMZ located server on the cisco ASA 5520. &lt;STRONG&gt; Now this host cannot browse&lt;/STRONG&gt; but allowed outside to inside access is possible.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Here is the configs done for this.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Inbound ACL&lt;/P&gt;&lt;P&gt;===========&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;access-list outside_access_in extended permit tcp any host 94.20.*.* eq ftp &lt;/P&gt;&lt;P&gt;access-list outside_access_in extended permit tcp any host 94.20.*.* eq ftp-data &lt;/P&gt;&lt;P&gt;access-list outside_access_in extended permit tcp any host 94.20.*.* eq www&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt; &lt;SPAN style="font-size: 10pt;"&gt;Inbound static nat&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;==================&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;static (DMZ,OUTSIDE) tcp 94.20.*.* ftp-data FTPserver ftp-data netmask 255.255.255.255 &lt;/P&gt;&lt;P&gt;static (DMZ,OUTSIDE) tcp 94.20.*.* ftp FTPserver ftp netmask 255.255.255.255 &lt;/P&gt;&lt;P&gt;static (DMZ,OUTSIDE) tcp 94.20.*.* www FTPserver www netmask 255.255.255.255 &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Is there anyway i can give this system to browse internet? may be through the natted IP ( 94.20.*.*)&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;</description>
    <pubDate>Tue, 12 Mar 2019 01:32:18 GMT</pubDate>
    <dc:creator>Shibu1978</dc:creator>
    <dc:date>2019-03-12T01:32:18Z</dc:date>
    <item>
      <title>Internet access</title>
      <link>https://community.cisco.com/t5/network-security/internet-access/m-p/2189152#M386980</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Port forwarding done to a DMZ located server on the cisco ASA 5520. &lt;STRONG&gt; Now this host cannot browse&lt;/STRONG&gt; but allowed outside to inside access is possible.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Here is the configs done for this.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Inbound ACL&lt;/P&gt;&lt;P&gt;===========&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;access-list outside_access_in extended permit tcp any host 94.20.*.* eq ftp &lt;/P&gt;&lt;P&gt;access-list outside_access_in extended permit tcp any host 94.20.*.* eq ftp-data &lt;/P&gt;&lt;P&gt;access-list outside_access_in extended permit tcp any host 94.20.*.* eq www&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt; &lt;SPAN style="font-size: 10pt;"&gt;Inbound static nat&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;==================&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;static (DMZ,OUTSIDE) tcp 94.20.*.* ftp-data FTPserver ftp-data netmask 255.255.255.255 &lt;/P&gt;&lt;P&gt;static (DMZ,OUTSIDE) tcp 94.20.*.* ftp FTPserver ftp netmask 255.255.255.255 &lt;/P&gt;&lt;P&gt;static (DMZ,OUTSIDE) tcp 94.20.*.* www FTPserver www netmask 255.255.255.255 &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Is there anyway i can give this system to browse internet? may be through the natted IP ( 94.20.*.*)&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;</description>
      <pubDate>Tue, 12 Mar 2019 01:32:18 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/internet-access/m-p/2189152#M386980</guid>
      <dc:creator>Shibu1978</dc:creator>
      <dc:date>2019-03-12T01:32:18Z</dc:date>
    </item>
    <item>
      <title>Re:Internet access</title>
      <link>https://community.cisco.com/t5/network-security/internet-access/m-p/2189153#M386982</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hi you can use the packet-tracer command to have a look what the ASA is thinking might give you an idea.&lt;BR /&gt;&lt;BR /&gt;Hth&lt;BR /&gt;&lt;BR /&gt;Sent from Cisco Technical Support Android App&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Sun, 21 Apr 2013 08:30:41 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/internet-access/m-p/2189153#M386982</guid>
      <dc:creator>patrick.preuss</dc:creator>
      <dc:date>2013-04-21T08:30:41Z</dc:date>
    </item>
    <item>
      <title>Re:Internet access</title>
      <link>https://community.cisco.com/t5/network-security/internet-access/m-p/2189154#M386983</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt; Browsing issue has been resolved by Pating the outbound access from this host.&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Sun, 21 Apr 2013 11:15:43 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/internet-access/m-p/2189154#M386983</guid>
      <dc:creator>Shibu1978</dc:creator>
      <dc:date>2013-04-21T11:15:43Z</dc:date>
    </item>
  </channel>
</rss>

