ASA5500 - predefined service ports seems to be sparse

kduckett · ‎03-10-2008

I am configuring a Cisco ASA5540 using ASDM (ASA OS ver 8.03 and ASDM ver

6.03 respectively) and there seems to be several common TCP and UDP ports missing from the "predefined" services ports list, i.e kerberos(TCP/UDP 88), DCE endpoint resolution (TCP/UDP 135), NETBIOS Session Service (TCP/UDP 139), Microsoft-DS or SMB (TCP/UDP 445)

Terminal-Services or RDP (TCP 3389), etc.

Does anyone have a config file that has more TCP and UDP ports already defined so they can be added to the FW config?

Thanks,

Keith

Report Inappropriate Content · ‎03-14-2008

Ports are not preconfigured only for security reasons. Configure the ports as and when needed for your deployment. Refer http://cisco.com/en/US/docs/security/asa/asa70/configuration/guide/traffic.html#wp1042224 for configuring access list.