ASA 5506-X Port Forwarding 25 and 443 for Exchange

[fs0000001111]

Hi,

I need open port 25 and 443 on my ASA 5506-X for my Exchange server.

How should I proceed?

Thanks.

[Reza Sharifi]

Hi,

Here is the config guide with examples:

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/91970-PIXASAopenblockports.html

HTH

[Philip D'Ath]

Assuming that you have a single static public IP address, and pretending that your Exchange server is 192.168.1.25:

object network exchange-server-smtp
 host 192.168.1.25
object network exchange-server-https
 host 192.168.1.25

object network exchange-server-smtp
 nat (any,outside) static interface service tcp smtp smtp 
object network exchange-server-https
 nat (any,outside) static interface service tcp 443 443 

access-list outside_access_in extended permit tcp any object exchange-server-smtp eq smtp 
access-list outside_access_in extended permit tcp any object exchange-server-https eq 443 

[fs0000001111]

Thanks a lot !

[smcneil]

This helped me out quite a bit as well, thanks!!!