testing of asa5505 if firewall deny access from outside

[edongskiu]

Hi,

I was able to setup our ASA5505. Internet modem connected to firewall (outside) and used one port for the modem and another port (outside) for the web server LAN card. The internet is passing ok from internet to our web server (second NIC of server is connected to our LAN). How do i test if the firewall actually blocks coming in?

The outside security is set at 0.

thanks!

[Collin Clark]

Enable debug on logging and test it with a port scan. You should see some denies.

Here's an example-

show log | i Deny

%ASA-4-106023: Deny udp src dmz:[destination IP]/53 dst outside:[source IP]/53 by access-group "dmz_inside_access"

Hope that helps