12-03-2021 02:19 AM
Hi Everyone ,
I would like to know ASA firewall can make rule policy source-ip or destination-ip with naming URL or can define object group for URL
example
object network A
host test.local
access-list Test extended permit tcp host x.x.x.x object-group A
12-03-2021 02:30 AM
Look at the below exmaple (is this help you ?)
12-03-2021 02:37 AM
Hi balaji
Thank you for information . I think the information will create object for FQDN but Can we create policy with FQDN or not and contain
source-ip or destination-ip ?
Following example below.
access-list Test extended permit tcp host x.x.x.x test.local.com
12-03-2021 02:50 AM
You can create a policy with FQDN (since the IP keep changing, that is the main goal here to use FQDN)
if the know fixed IP never change, then i will use IP address
it all depends on use case.
12-03-2021 03:25 AM
Hi balaji
Thank you for information. I have a small question about how long cache ip store in ASA and how many maximum for configure dns ip and can we use proxy dns ? I cannot found the more information about ASA when FQDN object
12-03-2021 04:23 AM
DNS depends on TTL, as long as it resolves the DNS i do not see any issue here.
I cannot found the more information about ASA when FQDN object
what information you looking : check the below example : (is this what you looking or something else ?)
https://www.fir3net.com/Firewalls/Cisco/cisco-asa-domain-fqdn-based-acls.html
12-03-2021 05:02 AM
I looking for the official document in Cisco.com
12-03-2021 05:42 AM
I looking for the official document in Cisco.com
the Orginal reply come from Cisco.com only ? not sure what you looking again.
Read the configuration guide the ASA Code you using.
12-03-2021 05:47 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide