ACL ON CISCO ASA Firewall

[clovisug]

Hello Gurus,

i need a clear solution am publishing a new internal hosted API server in the networked, the server is to be accessed outside publicly via port 1000 and via https.

kindly advise on the object rule and ACL configuration for this requirement to come true 

[Rob Ingram]

@clovisug try something like this:-

object nat SRV1
 host 10.2.2.5
 nat (inside,outside) static 1.1.1.1 service tcp 443 1000
access-list OUTSIDE_IN permit tcp any host 10.2.2.5 eq 443
access-group OUTSIDE_IN in interface OUTSIDE  

Change the IP addresses, ACL and interface name to match your environment.

[clovisug]

@Rob Ingram i will check this and confirm whoever i had used below config which didn't work

object network API_SVR

host 192.168.0.10

nat (inside,outside) static interface service tcp 443 1000 1000

acces-list OUT_API_SVR extended permit tcp any host 192.168.0.10 eq 443

access-group OUT_API_SVR in interface OUTSIDE

[Rob Ingram · Accepted solution]

@clovisug run packet-tracer from the CLI to simulate the traffic flow and see what the output indicates.