I would like to know if it's possible to open HTTP protocol (whatever the port) for one of my subnet to the outside on Cisco ASA 5510 v9.1(4) (ASDM v7.1(5)?

I guess I will have to play with service policy, but I don't know how (btw the tag "service-policy" doesn't yet exists).

For me, the Cisco ASA 5510 is a true applicative firewall, do you confirm ? Thank you,

UPDATE: ETL, regarding your answer can you take a look at what I'm seeing in my services ? For me, ASA is able to handle distinction to identify tcp/udp/icmp/ospf/... but not looking into protocol tcp ? isn't it ?

enter image description here

  • Sorry, I don't quite understand your sentence. When you select to allow "tcp/http" like you did, that means that it will allow port 80. If you mean that "will the ASA make sure it is web traffic on port 80", I guess that can be done with inspection rules which is another section in your ASA configuration. – ETL Mar 4 '14 at 14:34
  • Exactly, I'm not sure all 'http' traffic is on port 80. Sometimes, websites are on port 8080, 81,... I would like to allow these port only if it's http traffic. Is it more clear ? Thank you – Brice Mar 5 '14 at 19:10

Yes it is possible to do so by enabling tcp/http on your firewall ACLs. And yes, it is definitely applicative (http://www.merriam-webster.com/dictionary/applicative)


I think what you want is to do application layer inspection and alter it to include other ports.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.