Cisco ASA allow smtp traffic to mail server using ASDM

Posted on 2011-10-26
Last Modified: 2013-02-25
Hello, I recently installed an ASA 5510 on my production network to take advantege of the VPN. I configured it using the startup wizzard (VPN Wizzrd as well). Internet, VPN both work. I switched the gateway for all of my servers over to the ASA except my mail server. I still have the mail server gateway set to the old firewall becasue I cannot get smtp traffic to come over the ASA from my antispam provider. As soon as I have them switch to the public ip of the ASA they loose contact with my mailserver. I have tried to configure nat and access rules from other posts on google but have the packets blocked in packet tracer by the default deny rule. I would like to be able to configure this using ASDM.
Question by:beachbum9
    LVL 57

    Expert Comment

    by:Pete Long
    To let smtp in you need to port forward port 25 to the mail server

    Cisco PIX / ASA Port Forwarding

    And to let smtp out see

    Cisco ASA - Only Allow Mail Servers SMTP Outbound

    As for you not being able to get mail though I'm willing to bet you just need to disable esmtp inspection ignore the bit I've circled in this diagram in the list below does yours say inspect esmtp - if so you need to turn that off :)

    execute these commands

    cofigure terminal
    policy-map global_policy
    class inspection_default
    no inspect esmtp
    write mem

    that will sort that out :)



    Accepted Solution

    Used the exact steps show on the cmd line config...still no joy...still being blocked by the deny deny rules according to packet tracer. i attached a opy of the running conifg...

    Author Closing Comment

    It worked

    Featured Post

    Gigs: Get Your Project Delivered by an Expert

    Select from freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely and get projects done right.

    Join & Write a Comment

    Overview The Cisco PIX 501, PIX 506e, ASA 5505 and ASA 5510 (most if not all of this information will be relevant to the PIX 515e but I do not have a working configuration handy to verify the validity) are primarily used within small to medium busi…
    From Cisco ASA version 8.3, the Network Address Translation (NAT) configuration has been completely redesigned and it may be helpful to have the syntax configuration for both at a glance. You may as well want to read official Cisco published AS…
    It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    732 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    23 Experts available now in Live!

    Get 1:1 Help Now