Solved

New ASA - Need Basic Rules to Configure

Posted on 2010-11-12
4
372 Views
Last Modified: 2012-05-10
New to ASA's.

Whats a good starting config?

I dont need any ports open. No server behind. I want the most secure config!

IE: Do I need to block RFC1918 address on my WAN interface?


Thanks!
0
Comment
Question by:DAgent
4 Comments
 
LVL 5

Accepted Solution

by:
BooSTid earned 500 total points
Comment Utility
No you don't need to block private addressing on WAN interface; they don't get routed publicly by default.

A quick google brought up this as a startup guide:

http://www.tech21century.com/cisco-asa-5505-basic-configuration-tutorial/

Consider what traffic needs to get through the firewall and create acl's based on that, and then apply them to the interfaces. Difficult to really give you specifics without understanding explicit needs.
0
 
LVL 1

Author Comment

by:DAgent
Comment Utility
There are only two specifi needs:

1. Allow internet access

2. Allow vpn out
0
 
LVL 35

Expert Comment

by:Ernie Beek
Comment Utility
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Join & Write a Comment

If you have an ASA5510 then this sort of thing would be better handled with a CSC Module, however on an ASA5505 thats not an option, and if you want to throw in a quick solution to stop your staff going to facebook during work time, then this is the…
From Cisco ASA version 8.3, the Network Address Translation (NAT) configuration has been completely redesigned and it may be helpful to have the syntax configuration for both at a glance. You may as well want to read official Cisco published AS…
This video discusses moving either the default database or any database to a new volume.
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now