Allowing any trafic to the outside interface.

[David Shearing]

Hi,

I was hoping someone could help me with a rule on an ASA 5510.

access-list inside_access_in extended permit ip any interface Outside

The idea is to simply deny access to any other network, but allow access to the Outside Interface for Internet connectivity.  Having given it a try it doesnt appear to have worked.  But if i switch the rule for an any - any rule its fine?

Am i going about this completely the wrong way?

Thanks for the help.

David

[Federico Coto Fajardo]

David,

The ACLs on the ASA apply for pass-thru traffic (not to-the-box traffic).

This means when applying an ACL, the ASA will check it against traffic passing through it.

It will not check the ACL for traffic intended to the ASA itself.

If you include a control-plane keywork on the access-group, then the ASA will check it against itself.

Federico.