Solved

ASA 5510 Replacing Implicit Rule on Inside Interface

Posted on 2013-06-14
2
811 Views
Last Modified: 2013-06-18
Currently we have the default implicit rule on the inside interface: any -> any less secure.  I would like to start locking down the inside interface and want to do it VLAN by VLAN on our network.

If replacing the "any less secure" with an "any -> any IP" the same thing?  I was thinking I put that in first to keep the same flow, and then start slowly adding in the more restrictive rules above it.
0
Comment
Question by:AllDaySentry
2 Comments
 
LVL 25

Accepted Solution

by:
Cyclops3590 earned 250 total points
ID: 39248529
yes, just create an acl and apply it to interface.

you can start with the following that is the rough equivalent

access-list inside-in permit ip any any
access-group inside-in in interface inside
0
 

Author Comment

by:AllDaySentry
ID: 39249309
Thanks.

I did it through the ASDM which used:

access-list inside_access_in line 1 extended permit ip any any
access-group inside_access_in in interface inside
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Copy files flash files using tftp 6 31
Cisco VPN Client and Windows 10 9 85
Quality settings for cisco routers 8 52
Palo Alto Networks: Truly No Hit Count? 2 0
Have you experienced traffic destined through a Cisco ASA firewall disappears and you do not know if the traffic stops in the firewall or somewhere else? The solution is the capture feature. This feature was released in 6.2(1) and works in all firew…
From Cisco ASA version 8.3, the Network Address Translation (NAT) configuration has been completely redesigned and it may be helpful to have the syntax configuration for both at a glance. You may as well want to read official Cisco published AS…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

919 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now