List of Cisco ASA pre-defined services

Question

Where can I get a list of all the services that are pre-defined on a Cisco ASA device?

For example, I can do the following in a config:

object-group service ALLOWTOSERVER
 service-object tcp www
 service-object tcp https

And the ASA will know to allow port 80 and 443 though, but I can't find a list anywhere that describes all the services an ASA knows.

Answer 1

I don't know if there is one on the web, but you can do service-object tcp ? or service-object udp ? and it will list out every service that it knows about. If you want it for future reference just copy and paste it out of your terminal and save it to a text file.

Answer 2

Using Zypher's suggestion, and to save other people time in the future, here is the list from an ASA5505 using version 8.0.4:

: TCP
aol
bgp
chargen
cifs
citrix-ica
cmd
ctiqbe
daytime
discard
domain
echo
exec
finger
ftp
ftp-data
gopher
h323
hostname
http
https
ident
imap4
irc
kerberos
klogin
kshell
ldap
ldaps
login
lotusnotes
lpd
netbios-ssn
nfs
nntp
pcanywhere-data
pim-auto-rp
pop2
pop3
pptp
rsh
rtsp
sip
smtp
sqlnet
ssh
sunrpc
tacacs
talk
telnet
uucp
whois
www

: UDP
biff
bootpc
bootps
cifs
discard
dnsix
domain
echo
http
isakmp
kerberos
mobile-ip
nameserver
netbios-dgm
netbios-ns
nfs
ntp
pcanywhere-status
pim-auto-rp
radius
radius-acct
rip
secureid-udp
sip
snmp
snmptrap
sunrpc
syslog
tacacs
talk
tftp
time
who
www
xdmcp

Answer 3

I'm doing this for a project I'm working on at the moment. Here's what I've got, including port numbers:

TCP/    aol     5190
TCP/    bgp     179
TCP/    chargen     19
TCP/    cifs        3020
TCP/    citrix-ica      1494
TCP/    ctiqbe      2748
TCP/    daytime     13
TCP/    discard     9
TCP/    domain      53
TCP/    echo        7
TCP/    exec        512
TCP/    finger      79
TCP/    ftp     21
TCP/    ftp-data        20
TCP/    gopher      70
TCP/    h323        1720
TCP/    hostname        101
TCP/    http        80
TCP/    https       443
TCP/    ident       113
TCP/    imap4       143
TCP/    irc     194
TCP/    kerberos        750
TCP/    klogin      543
TCP/    kshell      544
TCP/    ldap        389
TCP/    ldaps       636
TCP/    login       513
TCP/    lotusnotes      1352
TCP/    lpd     515
TCP/    netbios-ssn     139
TCP/    nntp        119
TCP/    pcanywhere-data     5631
TCP/    pim-auto-rp     496
TCP/    pop2        109
TCP/    pop3        110
TCP/    pptp        1723
TCP/    rsh     514
TCP/    rtsp        554
TCP/    sip     5060
TCP/    smtp        25
TCP/    sqlnet      1521
TCP/    ssh     22
TCP/    sunrpc      111
TCP/    tacacs      49
TCP/    talk        517
TCP/    telnet      23
TCP/    uucp        540
TCP/    whois       43
UDP/    biff        512
UDP/    bootpc      68
UDP/    bootps      67
UDP/    cifs        3020
UDP/    discard     9
UDP/    dnsix       195
UDP/    domain      53
UDP/    echo        7
UDP/    http        80
UDP/    isakmp      500
UDP/    kerberos        750
UDP/    mobile-ip       434
UDP/    nameserver      42
UDP/    netbios-dgm     138
UDP/    netbios-ns      137
UDP/    nfs     
UDP/    ntp     123
UDP/    pcanywhere-status       5632
UDP/    pim-auto-rp     496
UDP/    radius      1645
UDP/    radius-acct     1646
UDP/    rip     520
UDP/    secureid-udp        5510
UDP/    sip     5060
UDP/    snmp        161
UDP/    snmptrap        162
UDP/    sunrpc      111
UDP/    syslog      514
UDP/    tacacs      49
UDP/    talk        517
UDP/    tftp        69
UDP/    time        37
UDP/    who     513
UDP/    xdmcp       177
TCP-UDP/    cifs        3020
TCP-UDP/    discard     9
TCP-UDP/    domain      53
TCP-UDP/    echo        7
TCP-UDP/    http        80
TCP-UDP/    kerberos        750
TCP-UDP/    pim-auto-rp     496
TCP-UDP/    sip     5060
TCP-UDP/    sunrpc      111
TCP-UDP/    tacacs      49
TCP-UDP/    talk        517
IP  ah      51
IP  eigrp       88
IP  esp     50
IP  gre     47
IP  icmp        1
IP  icmp6       58
IP  igmp        29
IP  igrp        9
IP  ip      0
IP  ipinip      4
IP  nos     94
IP  ospf        89
IP  pcp     108
IP  pim     103
IP  snp     109
IP  tcp     6
IP  udp     17

Answer 4

This is a python dictionary for the tcp/udp ports that asa changes to service names. The above was missing the ports for 'nfs' and 'www' found in ASA 8.2 (I don't think this has changed very much though)

ASA_DICT = { 'aol' : '5190', 'bgp' : '179', 'chargen' : '19', 'cifs' : '3020', 'citrix-ica' : '1494', 'ctiqbe' : '2748', 'daytime' : '13', 'discard' : '9', 'domain' : '53', 'echo' : '7', 'exec' : '512', 'finger' : '79', 'ftp' : '21', 'ftp-data' : '20', 'gopher' : '70', 'h323' : '1720', 'hostname' : '101', 'http' : '80', 'https' : '443', 'ident' : '113', 'imap4' : '143', 'irc' : '194', 'kerberos' : '750', 'klogin' : '543', 'kshell' : '544', 'ldap' : '389', 'ldaps' : '636', 'login' : '513', 'lotusnotes' : '1352', 'lpd' : '515', 'netbios-ssn' : '139', 'nntp' : '119', 'pcanywhere-data' : '5631', 'pim-auto-rp' : '496', 'pop2' : '109', 'pop3' : '110', 'pptp' : '1723', 'rsh' : '514', 'rtsp' : '554', 'sip' : '5060', 'smtp' : '25', 'sqlnet' : '1521', 'ssh' : '22', 'sunrpc' : '111', 'tacacs' : '49', 'talk' : '517', 'telnet' : '23', 'uucp' : '540', 'whois' : '43', 'biff' : '512', 'bootpc' : '68', 'bootps' : '67', 'cifs' : '3020', 'discard' : '9', 'dnsix' : '195', 'domain' : '53', 'echo' : '7', 'http' : '80', 'isakmp' : '500', 'kerberos' : '750', 'mobile-ip' : '434', 'nameserver' : '42', 'netbios-dgm' : '138', 'netbios-ns' : '137', 'nfs' : '2049', 'ntp' : '123', 'pcanywhere-status' : '5632', 'pim-auto-rp' : '496', 'radius' : '1645', 'radius-acct' : '1646', 'rip' : '520', 'secureid-udp' : '5510', 'sip' : '5060', 'snmp' : '161', 'snmptrap' : '162', 'sunrpc' : '111', 'syslog' : '514', 'tacacs' : '49', 'talk' : '517', 'tftp' : '69', 'time' : '37', 'who' : '513', 'xdmcp' : '177', 'cifs' : '3020', 'discard' : '9', 'domain' : '53', 'echo' : '7', 'http' : '80', 'kerberos' : '750', 'pim-auto-rp' : '496', 'sip' : '5060', 'sunrpc' : '111', 'tacacs' : '49', 'talk' : '517', 'www' : '80' }