Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am new to managing routers/firewalls and now need to manage a ASA 5510 in a small enterprise. I used to just demand settings from our network provider, thus I am familiar with the basic concepts, but have no real experience in setting up a firewall.
Which books/tutorials would you recommend for me to manage the router? Has anyone looked at Harris Andrea's ebook?


locked by HopelessN00b Jan 12 '15 at 16:21

This question exists because it has historical significance, but it is not considered a good, on-topic question for this site, so please do not use it as evidence that you can ask similar questions here. This question and its answers are frozen and cannot be changed. More info: help center.

closed as off-topic by HopelessN00b Jan 12 '15 at 16:21

This question appears to be off-topic. The users who voted to close gave this specific reason:

If this question can be reworded to fit the rules in the help center, please edit the question.

Asking for tutorials is generally not a good idea, as the tutorials get out of date quickly, and are of little use to future visitors. Instead, if you have a specific question about where you're stuck, feel free to ask another question outlining exactly where you're stuck. – Mark Henderson Jan 23 '12 at 10:43
up vote 1 down vote accepted

Haven't read the book myself, so I can't say one way or the other. I can however offer some advice.

A good place to start with ASA's is the Cisco Documentation

Also a good way to get ramped up with the ASA is to use the ASDM, with "preview the commands before you send them to the device" enabled (tools -> preferences -> General Tab). This lets you get up and running quickly, while still being able to see the command line behind the GUI. As you get more comfortable you can transition to the command line. Which is where you want to end up.

Also one of the hardest concepts for most people to get with the ASA - myself included - is that rules are applied as the packets are INBOUND to the DEVICE. So as an example say you had 3 legs with 3 servers:

ouside: internet
DMZ: Web01, MTA01
inside: DB01

If you wanted to allow Web01 to query DB01 you would apply the ACL on the DMZ leg - not the inside leg.

They are a little overwhelming at first, but once you get to know how the device works they are great firewalls.

If you run into any issues feel free to post here and we'll help you out.


Not the answer you're looking for? Browse other questions tagged or ask your own question.