cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2636
Views
4
Helpful
17
Replies

ASA5505 trouble opening port 443 for remote users Groupwise WebAccess

thomas.estes
Level 1
Level 1

We have a GroupWise server running WebAccess sitting behind ASA5505. I have opened port 25 and can send and recieve emails but can't get access to WebAccess. I can internally at https://192.168.1.50/servlet/webacc and everything is running fine. But when I try it externally via https://66.64.x.x/servlet/webacc I have no luck.

Below is the relevant setup information.

interface Vlan1

mac-address 0012.3f7f.9876

nameif inside

security-level 100

ip address 192.168.1.1 255.255.255.0

!

interface Vlan2

description NuVox T1

nameif outside

security-level 0

ip address 66.64.x.x 255.255.255.248

!

interface Ethernet0/0

switchport access vlan 2

access-list out2in extended permit tcp any any eq smtp

access-list out2in extended permit tcp any any eq https

access-list out2in extended permit tcp any any eq 9850

access-list out2in extended permit tcp any any eq 1677

access-list out2in extended permit tcp any any eq 7205

access-list out2in extended permit udp any any eq 443

access-list out2in extended permit udp any any eq 9850

access-list out2in extended permit udp any any eq 1677

access-list out2in extended permit udp any any eq 7205

static (inside,outside) tcp interface smtp 192.168.1.50 smtp netmask 255.255.255.255

static (inside,outside) tcp interface https 192.168.1.50 https netmask 255.255.255.255

static (inside,outside) tcp interface 9850 192.168.1.50 9850 netmask 255.255.255.255

static (inside,outside) tcp interface 1677 192.168.1.50 1677 netmask 255.255.255.255

static (inside,outside) tcp interface 7205 192.168.1.50 7205 netmask 255.255.255.255

static (inside,outside) udp interface 443 192.168.1.50 443 netmask 255.255.255.255

static (inside,outside) udp interface 9850 192.168.1.50 9850 netmask 255.255.255.255

static (inside,outside) udp interface 1677 192.168.1.50 1677 netmask 255.255.255.255

static (inside,outside) udp interface 7205 192.168.1.50 7205 netmask 255.255.255.255

access-group out2in in interface outside

route outside 0.0.0.0 0.0.0.0 66.64.x.x 1

17 Replies 17

thank you!

Did the hairpinning work for you?

It is not a requirement so I am not pursuing it. I appreciate the information though.

Review Cisco Networking for a $25 gift card