udp outbound rule

[Dragomir]

i have 4 or so interfaces on my asa

int1 - internal network

int2 - dmz

int3 internet

I want to allow an outbound udp port x.x.x.x from internal to dmz.

how would I do that?

[Maykol Rojas]

Hi,

If the "internal" interface has a higher security level than DMZ, what you need to do is just to add a nat translation (Only if you want access from internal to DMZ and not backwards)

In version 8.2 and earlier:

Nat (Internal) 1 0 0

global (DMZ) 1 interface

In version 8.3

nat (inside,DMZ) source dynamic any interface

Hope this helps.

Mike