Why ASA display TCP 80 as www not http or 80?

Adam David · ‎09-22-2010

Hi all, I have 2 simple question.

1. I was wondering why Cisco ASA display TCP 80 as www in the firewall, not the original port number, 80.

ASA5520# sh run | i eq 80
ASA5520# sh run | i eq www
 port-object eq www
 port-object eq www
 port-object eq www
access-list acl-in extended permit tcp host ABC host DEF eq www

or TCP 1494 as citrix-ica.

ASA5520# sh run | i 1494
ASA5520# sh run | i citrix-ica 
access-list acl-out extended permit tcp host ABC host DEF eq citrix-ica

According to IANA, 1494 is ica, not citrix-ica

http://www.iana.org/assignments/port-numbers

I have a problem to search firewall rules by filter it by port number, and then realize that it has been converted to service name

2. Is there any way to display this services as number, not by name?

Thanks in advance

Jennifer Halim · ‎09-22-2010

Unfortunately there are some predefined service names on ASA that can't be disabled.

Please find the predefined service name for your reference:

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/p.html#wp1918942