Let me preface by saying I am not a network administrator by trade and this firewall was set up originally by a Cisco consultant who is no longer available.
We have a small office with a Cisco ASA 5505, and have an IP based printer. This printer is remotely accessible to a vendor for printing accounting docs. Because the vendor is changing ISPs I need to update the public IP address for the vendor.
If you look at the snippets below, I am not sure I understand why they did not use the exact address for the rule, instead it is xxx.xxx.xxx.0 and then they noted the specific public IP address in the description. Should that not have been better to have it as xxx.xxx.xxx.250 to begin with?
When I make the update for the new public IP address of the vendor, should I not insert the specific public IP address they are coming in from rather than allowing the entire public /24 (the network their public IP comes from)?
Here are the snippets that i can find in the config, these are not the real IPs:
name 192.168.0.106 host-prt-000.106-printing01 name 192.168.0.107 host-prt-000.107-printing02 name XXX.XXX.XXX.0 vendor-srv-PrintingVendor description Specific Print Source: XXX.XXX.XXX.250 object network vendor-srv-PrintingVendor subnet XXX.XXX.XXX.0 255.255.255.0 description AccountingVendor object network host-prt-000.106-printing01 host 192.168.0.106 description accounting HP object network host-prt-000.107-printing02 host 192.168.0.107 description xerox
Thanks in advance.