topic Re: Port 80 query in Network Security

Port 80 query

aok — Fri, 21 Feb 2020 16:22:17 GMT

Hello

I blocked port 80 through our Cisco ASA to a particular IP but am still seeing connections being permitted in the logs. The only configuration for the IP is a NAT statement mapping it to an internal IP. Any ideas why?

Thanks

Re: Port 80 query

Dennis Mink — Wed, 17 Oct 2018 22:26:10 GMT

Can you send config and an extract of the log where you are seeing that port 80 is still being allowed?

(try the packet tracer tools in ASDM to see if the packet is allowed/denied or not)

Re: Port 80 query

aok — Wed, 17 Oct 2018 23:00:08 GMT

Sorry, figured it out! I have multiple public IP addresses NATted to the same private IP, and there was a rule allowing HTTP to one of the public IP objects, which effectively allowed HTTP to anything destined for the private IP. Once I removed that rule HTTP is blocked.