Gents
I have two servers in DmZ and many of my third parties connects to my server via sftp I have choosen port 778 .....and there are other ports which range from 3000-4013 now I have made an object group called dmz server and I have made a port object and has mentioned those ports .....there are 7 serves so that why inhave created object group in Asa
Now my access list is as under
Acces-list outin in permit ip any object-group frpservers object-serv log
The issue is that I can't ass eq sftp ....now I understand that firewall will allow only access to these ports but it will be open for any traffic fr
Example ping etc I really want to restrict to just sftp on specified ports
Thanks
Sent from Cisco Technical Support iPhone App
