Imagine you are given an existing network using an ASA firewall. The network works, but you aren't sure of anything else. The firewall may be completely improperly configured, with "outside" actually being inside and "inside" actually being outside, for all you know.
My question is this: what are the commands to take stock of an existing ASA firewall setup? With only CLI access, how do I figure out:
- What interfaces are available
- The names of the interfaces
- The security levels attached to the interfaces
- The access-lists attached to the interfaces, including rules and directions
I know how to set these things (
access-group), but I don't know how to figure them out given an existing system.
On a related note, is there anything else that I should worry about checking to make sure that the network isn't wide open?