Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 698
  • Last Modified:

configure asa 5510 firewall for websense remote client filtering

Trying to set up my firewall to allow remote client filtering with websense.  I already have a websense filter server for all of my internal clients running successfully on my 'inside' network.  I have installed a remote filtering server in my dmz that will be used to provide websense service for my laptop users who venture outside the network.  The remote server needs to communicate with the internal websense (policy) server.  I have been able to configure the firewall to allow my policy server to communicate via ping and remote desktop with the remote server in the dmz.  I am supposed to open up some ports that allows the remote server to communicate back with the policy server, for example tcp 55806, however I haven't been able to figure out where or how on my firewall I need to make this setting.  The specific instruction for this port is to "enable communication FROM remote filtering server (in dmz) to policy server (internal)."  My firewall experience, especially dmz configuration, is obviously novice.  Hopefully I have provided enough information and appreciate any guidance.
0
rick13175
Asked:
rick13175
1 Solution
 
andrewisCommented:
Because this traffic will be flowing from a lower to higher security level you will need an ACL permitting this traffic.

There is probably already an ACL configured on your DMZ interface.

Look in the configuration for an access-group command

access-group aclname in interface DMZ

Once you have established the name of the ACL you can add the entry that will allow the traffic to flow.

conf t
access-list aclname line 1 permit tcp sourceIP destinationIP eq 55806



0
 
rick13175Author Commented:
Thank you very much--this was just the ticket I needed to get into the ball park.
0

Featured Post

Evaluating UTMs? Here's what you need to know!

Evaluating a UTM appliance and vendor can prove to be an overwhelming exercise.  How can you make sure that you're getting the security that your organization needs without breaking the bank? Check out our UTM Buyer's Guide for more information on what you should be looking for!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now