Port 80 query

[aok]

Hello

I blocked port 80 through our Cisco ASA to a particular IP but am still seeing connections being permitted in the logs. The only configuration for the IP is a NAT statement mapping it to an internal IP. Any ideas why?

Thanks

A

[Dennis Mink]

Can you send config and an extract of the log where you are seeing that port 80 is still being allowed?

(try the packet tracer tools in ASDM to see if the packet is allowed/denied or not)

[aok · Accepted solution]

Sorry, figured it out! I have multiple public IP addresses NATted to the same private IP, and there was a rule allowing HTTP to one of the public IP objects, which effectively allowed HTTP to anything destined for the private IP. Once I removed that rule HTTP is blocked.