topic need firewall configuration help in Network Security https://community.cisco.com/t5/network-security/need-firewall-configuration-help/m-p/2038532#M398581 <HTML><HEAD></HEAD><BODY><P>You can do tcp state bypass for these two ports.</P><P></P><P><A class="jive-link-external-small" href="http://www.cisco.com/en/US/docs/security/asa/asa84/command/reference/s1.html#wp1451695">http://www.cisco.com/en/US/docs/security/asa/asa84/command/reference/s1.html#wp1451695</A></P><P></P><P>-Kureli</P></BODY></HTML> Mon, 08 Oct 2012 20:43:16 GMT Kureli Sankar 2012-10-08T20:43:16Z need firewall configuration help https://community.cisco.com/t5/network-security/need-firewall-configuration-help/m-p/2038531#M398580 <P style="background-color: #f7fafb; border-collapse: collapse; font-size: 12.222222328186035px; list-style: none; font-family: Arial, verdana, sans-serif;">the situation is this:</P><P></P><P style="background-color: #f7fafb; border-collapse: collapse; font-size: 12.222222328186035px; list-style: none; font-family: Arial, verdana, sans-serif;">Need for web redirection to guest portal</P><P></P><P style="background-color: #f7fafb; border-collapse: collapse; font-size: 12.222222328186035px; list-style: none; font-family: Arial, verdana, sans-serif;">the switch is the http server who is supposed to do this but the http server is on a different subnet from the host who is menat to be redirected</P><P style="background-color: #f7fafb; border-collapse: collapse; font-size: 12.222222328186035px; list-style: none; font-family: Arial, verdana, sans-serif;">a firewall is present between the two ends:</P><P></P><P></P><P style="background-color: #f7fafb; border-collapse: collapse; font-size: 12.222222328186035px; list-style: none; font-family: Arial, verdana, sans-serif;">The stateful firewall is blocking the syn ack from the switch that is supposed to be returned to the client with the fake ip address of the destination (acquired by client dns query)</P><P></P><P style="background-color: #f7fafb; border-collapse: collapse; font-size: 12.222222328186035px; list-style: none; font-family: Arial, verdana, sans-serif;">do you have any suggestion on how to turn off stateful inspection for ports 80 and 443 on the firewall via asdm?</P><P></P><P></P><P style="background-color: #f7fafb; border-collapse: collapse; font-size: 12.222222328186035px; list-style: none; font-family: Arial, verdana, sans-serif;">original discussion</P><P></P><P><A class="jive-link-external-small" href="https://community.cisco.com/message/3744540#3744540" target="_blank">https://supportforums.cisco.com/message/3744540#3744540</A></P> Tue, 12 Mar 2019 00:00:52 GMT https://community.cisco.com/t5/network-security/need-firewall-configuration-help/m-p/2038531#M398580 Giuliano Gerardi 2019-03-12T00:00:52Z need firewall configuration help https://community.cisco.com/t5/network-security/need-firewall-configuration-help/m-p/2038532#M398581 <HTML><HEAD></HEAD><BODY><P>You can do tcp state bypass for these two ports.</P><P></P><P><A class="jive-link-external-small" href="http://www.cisco.com/en/US/docs/security/asa/asa84/command/reference/s1.html#wp1451695">http://www.cisco.com/en/US/docs/security/asa/asa84/command/reference/s1.html#wp1451695</A></P><P></P><P>-Kureli</P></BODY></HTML> Mon, 08 Oct 2012 20:43:16 GMT https://community.cisco.com/t5/network-security/need-firewall-configuration-help/m-p/2038532#M398581 Kureli Sankar 2012-10-08T20:43:16Z