topic Re: Website access in Network Security

Website access

smicale — Mon, 11 Mar 2019 16:06:45 GMT

My entire Network is behind a ASA 5505 appliance. I am not good at all with the command line and use the ASDM to configure the unit. We were having some issues with employees using certain websites so I went into the ASDM and on the Firewall tab I went to the ACL Manager and added several IP addresses there and set them to DENY so people could not get to them. Now I want to allow one of the sites and I have tried unchecking one of the policies I created and then seeing if I can access the site and I still can not. Any idea why and am I missing something?

Re: Website access

andrew.prince — Mon, 17 Aug 2009 14:05:54 GMT

Did you configure a "Group" of IP addresses, and assigned the group to an ACL?

Re: Website access

andrew.prince — Mon, 17 Aug 2009 14:06:34 GMT

Did you configure a "Group" of IP addresses, and assigned the group to an ACL?

Re: Website access

smicale — Mon, 17 Aug 2009 14:13:10 GMT

No I just went to the Access Rules section on the Firewall tab and added a new rule and entered in the appropriate info.

Re: Website access

andrew.prince — Mon, 17 Aug 2009 14:28:38 GMT

You should be able from the ASDm to "uncheck" the acl entry or if you log into the device on the cli and enter

access-list <> deny ip/tcp/udp src/dst inactive

This will disable the acl entry.

Re: Website access

smicale — Mon, 17 Aug 2009 15:51:28 GMT

That is exactly what I have done from the ASDm, but I still cannot get to the site. That was why I was wondering if there was one more screen I was missing.

Re: Website access

andrew.prince — Mon, 17 Aug 2009 18:47:29 GMT

No - that is the way, try removing the acl from the interface, and confirm you can access the website. Then while the acl is not attached to an interface, make the acl entry "inactive" then re-attach it.

Re: Website access

somsh — Tue, 18 Aug 2009 13:59:54 GMT

could you please share the config.

Thanks

Som