0
votes
2answers
301 views

Cisco ASA5505, packet trace shows bootps and bootpc traffic is dropped on DMZ interface

As the title already states, I have a problem getting DHCPd working on the Cisco ASA5505 version 7.2 with ADSM 5.2 with the basic license. Its an older one I know, and every time I tend to forget how ...
1
vote
1answer
94 views

ASA permit only one host to *.xyz.com

I want to allow a host to download some updates from *.xyz.com (in internet). How should I permit only this host from my inside network to access *.xyz.com on ASA, access can be via http? At moment ...
2
votes
1answer
4k views

Cisco ASA 8.4 port forwarding

I am having trouble port-forwarding on an Cisco ASA from a host on the internet to a host on the internal network. The outside interface of the ASA is assigned via DHCP. Is there something else that ...
1
vote
3answers
2k views

ASA5505 :: Access-list permit public ip on port list (not range)

This is likely a common issue, but cannot find a solution. Here's the problem: in web server environment there are a set of common ports that need to be open, to name a few: 21,25,53,80,110,143,3306, ...
1
vote
2answers
606 views

ASA firewalls: how does stateful filtering affect my access lists?

Ok, so assume that I have an ingress access list that looks like this: access-list outside_in extended ip permit any X.Y.Z.1 eq 25 access-group outside_in in interface outside And I want to do ...
0
votes
2answers
1k views

Changing ASA access lists on the fly

I'm shortly going to be in a situation where I'll need to be updating a firewall on the fly. How does one update cisco ASA access lists on the fly? For example, if I start with: access-list ...
1
vote
1answer
1k views

ASA access lists and Egress Filtering

I'm trying to learn how to use a cisco ASA firewall, and I don't really know what I'm doing. I'm trying to set up some egress filtering, with the goal of allowing only the minimal amount of traffic ...