Solved

ASA5505 not allowing www requests

Posted on 2013-11-19
2
369 Views
Last Modified: 2013-11-20
For some reason my first attempt to create a rule on our new Cisco ASA 5505 router failed. It should be a simple rule: to allow http requests to go to a specific IP inside the LAN.

There's the part of the config file:
access-list inside_access_in extended permit tcp any host 192.168.2.5 eq www
access-list inside_access_in extended permit tcp any host 192.168.2.5 eq ftp
0
Comment
Question by:Orleen
2 Comments
 
LVL 6

Accepted Solution

by:
penguinjas earned 500 total points
ID: 39660876
I think you created the rules in the wrong zone.  Create the rule specifying the outside interface to the inside like below.

access-list outside extended permit tcp any host 192.168.2.5 eq www
access-list outside extended permit tcp any host 192.168.2.5 eq ftp
0
 

Author Closing Comment

by:Orleen
ID: 39663701
I figured it out. Had to create a NAT object that was the internal machine's IP, and then create an outbound rule that forwards the http requests to this object.
Thank you!
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

We sought a budget ($5,000) firewall solution that would provide all the performance we needed with no single point of failure.  Hosting a SAAS web application in our datacenter, it was critical that we find a way to keep connectivity up and inbound…
I found an issue or “bug” in the SonicOS platform (the firmware controlling SonicWALL security appliances) that has to do with renaming Default Service Objects, which then causes a portion of the system to become uncontrollable and unstable. BACK…
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
In an interesting question (https://www.experts-exchange.com/questions/29008360/) here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…

808 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question