Solved

How do I apply a access rules to VPN connections on my ASA 5510?

Posted on 2008-10-14
4
304 Views
Last Modified: 2010-04-21
I have recently finished configuring my Cisco ASA 5510 for remote VPN access. How do I create access rules (ACL's) just to the incoming VPN connections?
0
Comment
Question by:RobFarley
  • 2
4 Comments
 
LVL 10

Expert Comment

by:kyleb84
Comment Utility
You probably just have to catch them by port, then assign it to your WAN interface.

access-list 110 deny tcp X.X.X.X y.y.y.y x.x.x.x Y.Y.Y.Y eq 1723

-OR-

Give them their own subnet, and ACL that on your Vlan1 interface.
0
 

Author Comment

by:RobFarley
Comment Utility
My apologies but that was a bit over my head. I am acustomed to using the ASDM GUI. Command line is a challenge for me. Can you be a bit more specific?
0
 
LVL 4

Accepted Solution

by:
yurisk earned 125 total points
Comment Utility
Abit unclear to me, are you trying to restrict traffic inside VPN tunnel or ACL to be pushed to the client
as encryption domain ?
Or in other words - what are you trying to achieve ?

BTW if you mean restrict traffic inside VPN tunnel ( permit/deny access by IPs) here is the link
that can help (no GUI sorry) :
http://www.experts-exchange.com/Security/Software_Firewalls/Enterprise_Firewalls/Cisco_PIX_Firewall/Q_23801754.html

0
 

Author Closing Comment

by:RobFarley
Comment Utility
Thanks for your help! I am going to try a different approach.
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
This video discusses moving either the default database or any database to a new volume.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now