topic ASDM 6.2 GUI question in Network Security

ASDM 6.2 GUI question

Jacob Berger — Mon, 11 Mar 2019 23:32:56 GMT

im a newbie so be easy on me....

i connected to a asa 5510 at work

i checked the GUI of creating access rules

i see that by default all rules are created as incoming and only by choosing "more options" a outgoing rule can be set.

is there any reason for this? why is this option "hidden" ?

ASDM 6.2 GUI question

Jennifer Halim — Fri, 20 Jul 2012 08:00:12 GMT

Incoming is the most used access-list, where it is incoming towards the interface. Outgoing is seldom used as it is outgoing off the interface.

Don't be confused with the term incoming and outgoing, as it doesn't mean incoming and outgoing off the firewall, but it is incoming and outgoing off the ASA interfaces.

Re: ASDM 6.2 GUI question

Jacob Berger — Fri, 20 Jul 2012 09:06:33 GMT

if for example i want to block 10 different user vlans from accesing 1 server vlan

wouldnt i place a deny access rule outgoing on the server vlan interface?

or would i place it incoming on each user vlans interface?

ASDM 6.2 GUI question

Jennifer Halim — Fri, 20 Jul 2012 09:55:39 GMT

You can configure 10 different ACL incoming to each user vlan interface, or you can create 1 ACL outgoing on server vlan.

Either way is fine, typically you would see which is the least number of line of ACL and apply it accordingly.