ASA outside interface port scan

[vipinrajrc]

Hi Experts,

Is there any way to scan ASA's open ports from outside? or i need to identify / check which are all ports are open in ASA..

Could anyone please help me?

Thanks

Vipin

[mirober2]

Hi Vipin,

I assume you want to see what ports the ASA's outside interface is listening on? For that, the easiest thing to do is check the output of 'show asp table socket'.

If you are looking for ports allowed through the firewall to other destination IP addresses on your internal network, your best bet is 'show access-list'.

Hope that helps.

-Mike

[crewdog10]

Why not try a port scanner like GRC Shields UP! Just Google it. It's an easy way to check for listening ports and ICMP replies.

BTW, Mike, I'll have to try those commands also ;-)

[mvsheik123]

Hi,

Port scanner is the way to go.You can use any of the free port scanners. My preference is to Nmap.

hth

MS