Scansafe working on ASA v8.4

[dwatson]

Hi

Just wondering if there is a way to get the scansafe redirect running on Cisco ASA running version 8.2 and 8.4? I know version 9 has it inbuilt but we have some firewalls that are in the process of being replaced with new ASAs running v9 or ISR routers in the coming months.

thanks

David

[Luis Silva Benavides]

Hi David,

On 8.2 it is not supported but on version 8.4 it is. What you will need to do is a NAT statement. The downside is that you miss used granularity compared with 9.X

object network scansafe-protected-network
subnet 0.0.0.0 0.0.0.0
!
object network scansafe-proxy
host 
!
object service original-http
service tcp destination eq www
!
object service proxy-8080
service tcp destination eq 8080
!
nat (INSIDE,OUTSIDE) source dynamic scansafe-protected-network interface destination static scansafe-protected-network scansafe-proxy service original-http proxy-8080

HTH

Luis Silva

"If you need PDI (Planning, Design, Implement) assistance feel free to reach us"

http://www.cisco.com/web/partners/tools/pdihd.html