How to block IP addresses or IP blocks through the 5505 ASDM interface, not through command lines?

[mctaycisco]

Is it possible to block IP addresses or IP blocks through the 5505 ASDM interface, and not through command lines? If so, how?

[SANTHOSHKUMAR SARAVANAN]

Hi ,

 You can do it , click on object-group network , create network block and apply to ACL & Bind it to interface .

HTH

Sandy

[mctaycisco]

Thanks for your response. Not sure how to apply to ACL and bind it. By the way, can I just use the Access Rules to block or deny each IP or blocks of IPs?

MC

[SANTHOSHKUMAR SARAVANAN]

Hi ,

 What is your requirement ?? , Do you want to block any traffic originating/destination to your Network ?

HTH

Sandy

[mctaycisco]

Yes. I want to block any IP (i.e. 111.222.333.444 or the entire block 111.222.0.0) before they can reach the servers on the network.

[SANTHOSHKUMAR SARAVANAN]

Hi ,

Share me your system config of your ASA device , i will help you with ACL for denying above network subnets 

[mctaycisco]

Unfortunately I can't share any information on the router. It's company policy. But, if you could let me know where in the GUI interface of the router where I can find the ACL and how to enter the IPs to block I would really appreciate it.