Allow limited port to be opened through ASA

sushil · ‎05-31-2008

Hi,

I configured ASA.All working fine where all traffic from higher securtiy level(inside) is flowing to lower security level (outside).I want to harden this and want to allow limited ports to ouside like http,https,smtp,IKE etc.

Also would like to know how to customize or create a new port in ASA.

Reg,

Sushil

csco11029214 · ‎05-31-2008

Hello Sushil,

You can filter the incoming traffic based on Ports you require by applying ACL to the outside interface of the ASA. Create the rules to allow specific Ports to specific or all hosts inside the ASA and all the other traffic will be denied by the implicit deny rule.

You can have a look at http://www.cisco.com/en/US/docs/security/asa/asa81/config/guide/nwaccess.html

Regards,

Murtaza