Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
335
Views
0
Helpful
3
Replies

A new question about ASA5510

miregistrocisco
Level 1
Level 1

‎09-02-2008 12:33 AM - edited ‎03-11-2019 06:38 AM

Hi again! I've got an ASA5510 firewall and I want to allow only http requests from the inside network. I have tried the following access-lists without success:

access-list 200 extended permit tcp any any eq http

access-group 200 in interface inside

and

access-list 200 extended deny any any neq http

access-group 200 in interface inside

any suggestions?

Labels:
0 Helpful
3 Replies 3

mohammed_moustafa
Level 1
Level 1

‎09-02-2008 12:43 AM

Hi,

by without success what do you mean exactly? did inside network access http and everything or inside network couldn't access any thing at all???

Tha access list is right. you may check your NAT, Global configuration.

B.Regards,

Mohammed Moustafa.

0 Helpful

miregistrocisco
Level 1
Level 1
In response to mohammed_moustafa

‎09-02-2008 01:13 AM

the inside network can access everything, including http. Still a NAT failure?

0 Helpful

miregistrocisco
Level 1
Level 1
In response to miregistrocisco

‎09-02-2008 01:34 AM

Sorry, I mistook posting the second access-list, here is the right one:

access-list 200 extended deny tcp any any neq http

access-group 200 in interface inside

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents
Review Cisco Networking products for a $25 gift card