ASA5505 not allowing www requests

For some reason my first attempt to create a rule on our new Cisco ASA 5505 router failed. It should be a simple rule: to allow http requests to go to a specific IP inside the LAN.

There's the part of the config file:
access-list inside_access_in extended permit tcp any host 192.168.2.5 eq www
access-list inside_access_in extended permit tcp any host 192.168.2.5 eq ftp
OrleenAsked:
Who is Participating?
 
penguinjasConnect With a Mentor Commented:
I think you created the rules in the wrong zone.  Create the rule specifying the outside interface to the inside like below.

access-list outside extended permit tcp any host 192.168.2.5 eq www
access-list outside extended permit tcp any host 192.168.2.5 eq ftp
0
 
OrleenAuthor Commented:
I figured it out. Had to create a NAT object that was the internal machine's IP, and then create an outbound rule that forwards the http requests to this object.
Thank you!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.