Solved

ASA5505 not allowing www requests

Posted on 2013-11-19
2
364 Views
Last Modified: 2013-11-20
For some reason my first attempt to create a rule on our new Cisco ASA 5505 router failed. It should be a simple rule: to allow http requests to go to a specific IP inside the LAN.

There's the part of the config file:
access-list inside_access_in extended permit tcp any host 192.168.2.5 eq www
access-list inside_access_in extended permit tcp any host 192.168.2.5 eq ftp
0
Comment
Question by:Orleen
2 Comments
 
LVL 6

Accepted Solution

by:
penguinjas earned 500 total points
ID: 39660876
I think you created the rules in the wrong zone.  Create the rule specifying the outside interface to the inside like below.

access-list outside extended permit tcp any host 192.168.2.5 eq www
access-list outside extended permit tcp any host 192.168.2.5 eq ftp
0
 

Author Closing Comment

by:Orleen
ID: 39663701
I figured it out. Had to create a NAT object that was the internal machine's IP, and then create an outbound rule that forwards the http requests to this object.
Thank you!
0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

I recently had the displeasure of buying a new firewall at one of the buildings I play Sys Admin at. I had to get a better firewall than the cheap one that I had there since I was reconnecting the main office to the satellite office via point-to-poi…
We sought a budget ($5,000) firewall solution that would provide all the performance we needed with no single point of failure.  Hosting a SAAS web application in our datacenter, it was critical that we find a way to keep connectivity up and inbound…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now