?
Solved

configure asa 5510 firewall for websense remote client filtering

Posted on 2009-04-06
2
Medium Priority
?
695 Views
Last Modified: 2012-05-06
Trying to set up my firewall to allow remote client filtering with websense.  I already have a websense filter server for all of my internal clients running successfully on my 'inside' network.  I have installed a remote filtering server in my dmz that will be used to provide websense service for my laptop users who venture outside the network.  The remote server needs to communicate with the internal websense (policy) server.  I have been able to configure the firewall to allow my policy server to communicate via ping and remote desktop with the remote server in the dmz.  I am supposed to open up some ports that allows the remote server to communicate back with the policy server, for example tcp 55806, however I haven't been able to figure out where or how on my firewall I need to make this setting.  The specific instruction for this port is to "enable communication FROM remote filtering server (in dmz) to policy server (internal)."  My firewall experience, especially dmz configuration, is obviously novice.  Hopefully I have provided enough information and appreciate any guidance.
0
Comment
Question by:rick13175
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 5

Accepted Solution

by:
andrewis earned 2000 total points
ID: 24079853
Because this traffic will be flowing from a lower to higher security level you will need an ACL permitting this traffic.

There is probably already an ACL configured on your DMZ interface.

Look in the configuration for an access-group command

access-group aclname in interface DMZ

Once you have established the name of the ACL you can add the entry that will allow the traffic to flow.

conf t
access-list aclname line 1 permit tcp sourceIP destinationIP eq 55806



0
 

Author Closing Comment

by:rick13175
ID: 31567143
Thank you very much--this was just the ticket I needed to get into the ball park.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

We sought a budget ($5,000) firewall solution that would provide all the performance we needed with no single point of failure.  Hosting a SAAS web application in our datacenter, it was critical that we find a way to keep connectivity up and inbound…
A 2007 NCSA Cyber Security survey revealed that a mere 4% of the population has a full understanding of firewalls. As business owner, you should be part of that 4% that has a full understanding.
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …
Do you want to know how to make a graph with Microsoft Access? First, create a query with the data for the chart. Then make a blank form and add a chart control. This video also shows how to change what data is displayed on the graph as well as form…
Suggested Courses

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question