Cisco ASA 5520 is being used in our company network.we are distributing internet by using PAT against one global "public"ip address at outside interface of ASA.
Actually the ip address of our proxy server is PAT within ASA5520
Now we want to apply ACL to filter some ports.But ACL didn't work bec: i used the local ip address of proxy server as a source address in the ACL.
So what is the way to block some ports so that LAN clients can't use these port services.I mean what ip address should i put in the ACL's source address.
Kindly resolve my problem.I will be thankful to u.