Queries regarding ASA5545-X

[nurul afiqah]

ASA Version: 9.6(4)41
ASDM Version: 7.15(1)150 

There’s are few enquiries about ASA5545-X Firewall
1.           Does ASA support wildcard mask?
2.           Does ASA firewall support FQDN?
               Any limitation?

Any KB related to above queries? 

[Karsten Iwen]

1) No, but discontinous masks like 255.255.0.255

2) Yes

https://www.cisco.com/c/en/us/td/docs/security/asa/asa914/configuration/general/asa-914-general-config.html

https://www.cisco.com/c/en/us/td/docs/security/asa/asa914/configuration/firewall/asa-914-firewall-config.html

Perhaps you need to update for 2. I don't remember when it was introduced.

[nurul afiqah]

Hi @Karsten Iwen , 

Can you explain more on the item number 1? 

[Karsten Iwen]

It is pretty much the same as a wildcard mask but configured as a normal mask:

access-list ACL permit ip 172.16.0.10 255.255.0.255 host 10.10.10.10

allows the host .10 from any 172.16.x subnet to communicate with 10.10.10.10.

A big drawback is that the ASDM is not aware of this and can't display it correctly.

[MHM Cisco World]

1.           Does ASA support wildcard mask? NO
2.           Does ASA firewall support FQDN? YES

https://www.fir3net.com/Firewalls/Cisco/cisco-asa-domain-fqdn-based-acls.html

MHM