topic Help creating access rules on Cisco ASA 5520 platform in Network Security

Help creating access rules on Cisco ASA 5520 platform

chrisjmolloy — Mon, 11 Mar 2019 21:07:07 GMT

Hello,

Our company has recently upgraded our firewall from a Borderware Steelgate v7.1 platform to a Cisco ASA 5520 platform. Needless to say the interface on the Cisco platform is much more complex and I don't have much experience working with firewalls (so, please take it easy on me). Our other IT guy is out of town and this is the first time I have worked on this setup.

I need to create the following access rule

I need to open port 4**0 to be allowed through the firewall from external ip address 10.XXX.XX.XXX only. Then forward port 4**0 to 10.XX.XX.XX port 80 tcp

Not sure on how to create these access rules, any help would be greatly appreciated, such as instructions on how to create the rules.

Help creating access rules on Cisco ASA 5520 platform

Collin Clark — Wed, 03 Aug 2011 15:24:28 GMT

Chris-

Check out this article, I think it will help. If not please let us know.

https://supportforums.cisco.com/docs/DOC-16848

Help creating access rules on Cisco ASA 5520 platform

varrao — Wed, 03 Aug 2011 15:28:35 GMT

Hi Collin,

You would need the following:

static (inside,outside) tcp 10.xxx.xxx.xxx.xxx 4**0 10.xx.xx.xx 80

access-list outside_access_in permit tcp any host 10.xxx.xxx.xxx eq 4**0

access-group outside_access_in in interface outside

where inside would be your lan interface and outside is your external interafce.

Let me know if you face any issues.

Hope this helps,

Thanks,

Varun

Help creating access rules on Cisco ASA 5520 platform

chrisjmolloy — Wed, 03 Aug 2011 16:17:36 GMT

Hi Varun,

I appreciate your response and patience. I just need a little more help when it comes to this as I really unsure with this interface.

Hopefully we can break this down together.

first comment

static (inside,outside) tcp 10.xxx.xxx.xxx.xxx 4**0 10.xx.xx.xx 80. Where do I go to create this. Do I add an access rule, create a netwok object

Once I get the first part figured out wil lgo to the access list outsie access comment. Next, Although I think that is where i need to create the rule. Please advise.

Help creating access rules on Cisco ASA 5520 platform

chrisjmolloy — Wed, 03 Aug 2011 16:34:54 GMT

Do you mean create a Static NAT rule first and then create the access rule?

Help creating access rules on Cisco ASA 5520 platform

varrao — Wed, 03 Aug 2011 17:46:56 GMT

Hi Chris,

Could you provide me the configuration that you currently have on your ASA, moreover can you tell me the version of ASA softwrae that you are using?

You need to enter this command in the CLI , in config mode.

Thanks,

Varun

Help creating access rules on Cisco ASA 5520 platform

chrisjmolloy — Wed, 03 Aug 2011 17:59:14 GMT

Help creating access rules on Cisco ASA 5520 platform

varrao — Wed, 03 Aug 2011 18:12:46 GMT

can you provide your config as well??

-Varun

Help creating access rules on Cisco ASA 5520 platform

chrisjmolloy — Wed, 03 Aug 2011 18:19:28 GMT

this may sound bad but how do i get the config info for you?

Help creating access rules on Cisco ASA 5520 platform

varrao — Wed, 03 Aug 2011 18:23:56 GMT

go to tools on the top of the window and then CLI interface, and then type in "show run" and then send the comnmand, copy the output.

Thanks,

Varun

Help creating access rules on Cisco ASA 5520 platform

chrisjmolloy — Wed, 03 Aug 2011 18:43:59 GMT

I appreciate the help but the issue has been figured out with your first response. Thanks again.