Solved

How do I block an outbound connection to an IP address?  Cisco ASAA-5510

Posted on 2010-09-09
2
603 Views
Last Modified: 2012-05-10
I have a Cisco ASA-5510 and I'm not comfortable with experimenting with command-line settings.  I use the ASDM.
My ISP is claiming someone in my network is maliciously attacking a a certain public IP.  I disagree but still want to block any inside traffic from reaching that outside IP address.
I don't think the ASDM will allow me to write an outbound rule on the outside interface.  I have the following line hoping to block anyone on the "inside" interface from getting out.:
access-list inside_access_in extended deny ip any 91.20.0.0 255.255.0.0
Is this a correct entry to block any IP traffic from the inside from reaching the 91.20.0.0 network in the real world?
If it is, then my ISP's claim that we're the source is incorrect.
0
Comment
Question by:davehansen22
2 Comments
 
LVL 3

Accepted Solution

by:
kf4zmt earned 500 total points
ID: 33639283
Yes, that should do it.  Just don't forget to apply the ACL to your inside interface (unless it is already of course).  You can always do a "sh access-list inside_access_in" and see if that particular line has any hits.  If so, then it is blocking traffic to that address range.
0
 

Author Closing Comment

by:davehansen22
ID: 33639299
Thanks very much.  -Dave
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

Suggested Solutions

How to configure Site to Site VPN on a Cisco ASA.     (version: 1.1 - updated August 6, 2009) Index          [Preface]   1.    [Introduction]   2.    [The situation]   3.    [Getting started]   4.    [Interesting traffic]   5.    [NAT0]   6.…
Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…
When you create an app prototype with Adobe XD, you can insert system screens -- sharing or Control Center, for example -- with just a few clicks. This video shows you how. You can take the full course on Experts Exchange at http://bit.ly/XDcourse.

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now