Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

how control access CM's "ccmadmin" page through ASA

We have used Cisco ASA to protect Cisco Call Manager. Could Cisco ASA filter IP Phone users to login Call Manager's admin page such as URI filtering?

Thanks,

Raymond Chuang

2 REPLIES

Re: how control access CM's "ccmadmin" page through ASA

Is the call manager is a different subnet or DMZ than the IP phones and the users ??? If the traffic is flowing through ASA, u can filter or deny https port from the user subnet to the CCM ...

access-list inside deny tcp 10.0.0.0 255.255.255.0 host 100.100.100.100 eq 443

this was just an example.. u can also use an additinal module on the ASA called CSC SSM to do URL filtering.. read about CSC on the CCO...

Hope this helps.. all the best. rate replies if found useful..

Raj

New Member

Re: how control access CM's "ccmadmin" page through ASA

Hi Raj,

Right! CM is in inside, IP Phones and clients are at outside. We can't to filter https(443) as both phone user and CM admin need to use https to access CM's /ccmadmin or ccmuser folders. I found the URL filter need to bind with HTTP inspection but CM's access is HTTPS, is it possible?

Regards,

Raymond Chuang.

150
Views
0
Helpful
2
Replies
CreatePlease to create content