Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Step-by-Step Configuration and Troubleshooting Best Practices for the NGFW, NGIPS and AMP Technologies A Visual Guide to the Cisco Firepower Threat Defense (FTD)
Community Member

Cisco ASA 5505 port forward to server proxy ( no wccp )

Hi all,

I've read few old post about the redirect of 80 443 to a server-proxy with wccp. This solution is the only to forward port ? I think exists a more simple solution to forward a port, does it exists ?

For example how could I do to forward the 22 port to another host in my inside-lan to 222 ?

Thanks to all for reply.

2 REPLIES
Community Member

Re: Cisco ASA 5505 port forward to server proxy ( no wccp )

To allow access to particular TCP port forwarding applications for a specific user or group policy, use the listname you create here with the port-forward command in webvpn mode. The security appliance does not support the Microsoft Outlook Exchange (MAPI) proxy. Neither port forwarding nor the smart tunnel feature that provides application access through a clientless SSL VPN session supports MAPI. For Microsoft Outlook Exchange communication using the MAPI protocol, remote users must use AnyConnect.

http://www.cisco.com/en/US/docs/security/asa/asa81/command/ref/p.html#wp1875150

Community Member

Re: Cisco ASA 5505 port forward to server proxy ( no wccp )

Hi,

do you mean, portforwarding from external ip to an internal server behind nat?

Then, you can do a static NAT with PAT for the server

access-list internal_nat_static_3 extended permit tcp host $internal-host eq $port any

static ($internal-interface,$external-interface) tcp $external-ip $port access-list internal_nat_static_3

if you want to redirect packets from internal ip's you need policy based routing, which isn't supported by the asa.

1499
Views
0
Helpful
2
Replies
CreatePlease to create content