cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
442
Views
0
Helpful
2
Replies

Prevent logmein icoming access to internal host

onwiredweb
Level 1
Level 1

I have an ASA 5505 Security Plus appliance.

The problem that I am having is denying incoming access to host inside my network.

Below is my current access list.

access-list inbound extended permit tcp any host Exchange01_Outside eq smtp

access-list inbound remark webmail requests for exchange01

access-list inbound extended permit tcp any host Exchange01_Outside eq www

access-list inbound remark Permitting PPTP Connections Through the ASA

access-list inbound extended permit gre any host DC01_Outside

access-list inbound extended permit tcp any host DC01_Outside eq pptp

access-list inbound extended permit tcp any host DC01_Outside eq 3389

access-list inbound extended permit tcp any host Web001_Outside eq www

access-list inbound remark http requests for Web001

access-list inbound extended permit tcp any host Web001_Inside eq www

access-list inbound extended permit icmp any any

access-list Client_Access_splitTunnelAcl standard permit any

access-list inside/LAN_nat0_outbound extended permit ip any 10.1.2.0 255.255.255.0

access-list inside/LAN_access_in extended permit ip any any

access-list inside/LAN_access_in extended permit icmp any 10.1.0.0 255.255.0.0

access-list Client_Access_splitTunnel extended permit ip 10.1.1.0 255.255.255.0 10.1.2.0 255.255.255.0

access-list jasztech_users_splitTunnelAcl standard permit any

2 Replies 2

didyap
Level 6
Level 6

By default all incoming connections to inside network are denied by the ASA, except if an access list on the interface allows this. Following link may help you

http://www.cisco.com/en/US/docs/security/asa/asa72/configuration/guide/traffic.html

Thanks for following up with me. I'll check out the link you provided, follow up with you with my findings.

Thanks Again,

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: