<div>
Using:<br />
Access-list outside permit tcp any host eq <i>port</i> <br />
static (inside,outside) tcp <i>outside_ip port inside_ip port</i> netmask 255.255.255.255<br />
access-group outside in interface outside<br />
<br />
This way you only open up one port to the inside.
</div>


<div>
Oops, first line should be:<br />
Access-list outside permit tcp any host <i>outside_ip</i> eq <i>port</i><br />
<br />
If your ASA is 8.3 or higher, there are some changes to this though.
</div>


<div>
So for example if the port is rdp 3389 add it to both instances ? <br />
<br />
static (inside,outside) tcp outside_ip port inside_ip port 
</div>


<div>
<div class="content wysiwyg-content">
Whats the most secure way to nat a public ip to an inside server that requires access to from the internet on a specific tcp port ? 
</div>
</div>


Whats the most secure way to nat a public ip to an inside server that requires access to from the internet on a specific tcp port ? 

Using:
Access-list outside permit tcp any host eq port 
static (inside,outside) tcp outside_ip port inside_ip port netmask 255.255.255.255
access-group outside in interface outside

This way you only open up one port to the inside.

Oops, first line should be:
Access-list outside permit tcp any host outside_ip eq port

If your ASA is 8.3 or higher, there are some changes to this though.

So for example if the port is rdp 3389 add it to both instances ? 

static (inside,outside) tcp outside_ip port inside_ip port 

ASA5510 Natting an inside server to public iip

Network design and methodology, also known as network architecture, is the design of a communication network. It is a framework for the specification of a network's physical components and their functional organization and configuration, its operational principles and procedures, as well as data formats used in its operation. In telecommunication, the specification of a network architecture may also include a detailed description of products and services delivered via a communications network, as well as detailed rate and billing structures under which services are compensated.

Network Architecture

Cisco PIX is a dedicated hardware firewall appliance; the Cisco Adaptive Security Appliance (ASA) is a firewall and anti-malware security appliance that provides unified threat management and protection the PIX does not. Other Cisco devices and systems include routers, switches, storage networking, wireless and the software and hardware for PIX Firewall Manager (PFM), PIX Device Manager (PDM) and Adaptive Security Device Manager (ASDM).

Cisco

Hardware-based firewalls provide more sophisticated protection for inbound and outbound traffic than the simple Windows software firewall or the basic NAT firewalls found in routers. These devices implement techniques such as stateful packet inspection, deep packet inspection, and content filtering; and may include built-in antivirus and anti-malware protection.