topic Ports to be opened in Network Security https://community.cisco.com/t5/network-security/ports-to-be-opened/m-p/1000062#M916459 <P>Hi i use ASA 5520 all my clients on my LAN Jus go out for internet i use ip any any on my outside interface of ASA i dont want to use it CAN u please tell me the default ports that are to be permitted i know some what else can be used </P><P></P><P></P><P>www</P><P>ftp</P><P>ssh</P><P>3389 remote desktop service </P><P></P><P></P><P></P><P></P> Mon, 11 Mar 2019 13:16:37 GMT sreekanth sarma 2019-03-11T13:16:37Z Ports to be opened https://community.cisco.com/t5/network-security/ports-to-be-opened/m-p/1000062#M916459 <P>Hi i use ASA 5520 all my clients on my LAN Jus go out for internet i use ip any any on my outside interface of ASA i dont want to use it CAN u please tell me the default ports that are to be permitted i know some what else can be used </P><P></P><P></P><P>www</P><P>ftp</P><P>ssh</P><P>3389 remote desktop service </P><P></P><P></P><P></P><P></P> Mon, 11 Mar 2019 13:16:37 GMT https://community.cisco.com/t5/network-security/ports-to-be-opened/m-p/1000062#M916459 sreekanth sarma 2019-03-11T13:16:37Z Re: Ports to be opened https://community.cisco.com/t5/network-security/ports-to-be-opened/m-p/1000063#M916465 <HTML><HEAD></HEAD><BODY><P>any traffic from in to out is permitted by deafult, unless you apply an ACL.</P><P></P><P>any traffic from out to in has to be permitted in an ACL if you have something that needs to be served to the web (ie. ftp). you Never want permit ip any any frmo out to in!!</P></BODY></HTML> Fri, 18 Jul 2008 13:26:29 GMT https://community.cisco.com/t5/network-security/ports-to-be-opened/m-p/1000063#M916465 Adam Frederick 2008-07-18T13:26:29Z Re: Ports to be opened https://community.cisco.com/t5/network-security/ports-to-be-opened/m-p/1000064#M916472 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P>Some common ports would be </P><P>http,https,dns,ftp,3389.. but better to enable logging and capture traffic logs.</P><P>This will help you to build the access-lists for allowing traffic from inside LAN.</P><P></P><P>And like the other person has mentioned, put ACL on the Outside .. allow only legitimate traffic from Out to in.</P><P></P></BODY></HTML> Fri, 18 Jul 2008 14:06:23 GMT https://community.cisco.com/t5/network-security/ports-to-be-opened/m-p/1000064#M916472 dhananjoy chowdhury 2008-07-18T14:06:23Z