I have been trying to figure out how to block port 80 from outside my network to a specific server. I want to allow only port 8081 to be accessed. Currently when I setup an access rule to block http it blocks all access to the server from outside the network coming in. Is it possible to block only port 80 and allow 8081 or block all ports and allow 8081? This is on a Cisco ASA 5545. Thanks in advance for any help.
Hi, Example below, should permit anybody on the internet to access the server on port 8081, this example uses static NAT. You'll need to amend the ip addresses and potentially the name of the interfaces (inside/outside) to fit your environment.
object network SERVER host 192.168.250.2 nat (INSIDE,OUTSIDE) static 188.8.131.52 service 80 8081
access-list OUTSIDE_IN permit tcp any host 192.168.250.2 eq 80 access-group OUTSIDE_IN in interface OUTSIDE
Radius server configuration for 802.1X
Server radius test1
Address ipv4 10.1.1.1
Server radius test2
Address ipv4 10.1.1.2
aaa group server radius TEST-gr
server name test1
server name test2
Umbrella’s cloud-delivered firewall (CDFW) is a cool features that provides Firewall Services in the Cisco Umbrella Cloud without the need to deploy on-premises firewall devices and visibility and control for internet traffic across all branch offices. To...
SymptomsDownloadable ACL (dACL) does not take effect on the IOS-XE Network Access DevicesDiagnosisCreating redirection ACL on the IOS-XE device failed to redirect the specified traffic for captive portal redirectionSolutionEnable device tracking, Below is...
Multiple Cisco Security Technologies in a single book : ASA Firepower, WSA, Umbrella, ISE and VPN with 100 percent 100 practical scenarios with 70 Labs to cover important topics of the Cisco SCOR Exam. The best part is ISE with interesting scenarios wi...