How do I publish a website through a Cicso ASA 5505?

Posted on 2009-12-21
Last Modified: 2012-05-08
I have a SharePoint site that my client wants to make publically available. I do not know how to publish it through the firewall. I need the firewall to map requests coming in for a specific external url (i.e.
to an internal url (http://myclientsintranet)
SInce it is Sharepoint, there are actually 3 sites, all on the same port (magic of SharePoint, I guess) so it has to be directed to the URL and not an ip address and port. This is important because one is for external access using FBA, one is external using AD Authentication, and the third is internal only.
Any idea on how to do this? I can do it in Forefront but I am not a Cisco guy so this is stumping me.
Oh, it is a Cisco ASA 5505 with software version 7.0.
Question by:needspace
    LVL 22

    Expert Comment

    by:Jody Lemoine
    Unfortunately, the ASA doesn't really work up at the presentation layer in this way.  That's not to say it can't be done, but the ASA isn't going to do all of the work for you.  I would approach the problem this way:

    First of all, the magic of putting multiple sites on the same address and port is just a standard HTTP 1.1 header function and has much more to do with IIS than with SharePoint.  I would go into the IIS configuration for the site you want to expose to the outside and configure it to respond to on a different port (say 81/tcp for example) as well as http://myclientsintranet on port 80/tcp.  Once that's done, you can tell the ASA to do port-level forwarding of 80/tcp on the outside to 81/tcp on the Sharepoint server.  When the client goes to, the request will be forwarded intact and the web site will respond appropriately, serving up the site appropriate to the URL requested.  If a client goes to the external web port without the appropriate URL, your IIS server will give them an error page as no other sites are configured on that port.

    Will that do the trick for you?

    Author Comment

    OK. I think I have the path set up internally lin IIS like you recommend. How do I go about opening this up on the ASA? Now I'll be mapping requests for the url to <sharepointserverIPAddress>:81 .
    LVL 22

    Accepted Solution

    This configuration command will set up the NAT entry on the ASA for you:

    static (inside,outside) tcp interface www x.x.x.x 81 netmask

    Replace x.x.x.x with your Sharepoint server's IP address.

    You'll also want to allow www traffic inbound on the outside interface.  This can be done with the following configuration command:

    access-list outside extended permit tcp any any eq www

    Replace "outside" with whatever the name of our inbound access list for the outside interface.

    Author Comment

    Thanks I'll give that a shot

    Author Closing Comment

    That worked. I have some additional problems in Sharepoint that have surfaced with the redirected URL but I will post that in another thread. Thank you for your help

    Featured Post

    Enabling OSINT in Activity Based Intelligence

    Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

    Join & Write a Comment

    Suggested Solutions

    Occasionally, we encounter connectivity issues that appear to be isolated to cable internet service.  The issues we typically encountered were reset errors within Internet Explorer when accessing web sites or continually dropped or failing VPN conne…
    Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
    Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

    733 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now