Cisco asa 5505 asdm configuration example

#Cisco asa 5505 asdm configuration example software#

Under Destination Port, select the вЂњGroupвЂќ radio button.

Under Destination, click the вЂњвЂ¦вЂќ button by IP address, and select the outside, world-routable IP address of the device you wish to allow access to.

Under Source, change Type to вЂњNetwork Object Group,вЂќ then select the group name we set previously.

Change the Interface dropdown to вЂњOutsideвЂќ and make sure Direction says: вЂњincoming.вЂќ.

Click вЂњSecurity PolicyвЂќ on the left and then in the center pane, click вЂњAdd.вЂќ.Now to define which networks are allowed on which services.You probably want outside-network/24, which is the subnet of the units external interface. Choose a group name, for example: вЂњoffice.вЂќ.Click вЂњAddвЂќ and select вЂњNetwork Object GroupвЂ¦вЂќ.You should create a group for each security level. For our setup, we have a few subnets that are all allowed access to all services, but you might want to restrict more. Next, we want to define groups of IP addresses that are allowed to access different services.Type in вЂњ3306вЂќ to вЂњ3306вЂќ and click the вЂњAdd >вЂќ button. Type in вЂњ3389вЂќ to вЂњ3389вЂќ and click the вЂњAdd >вЂќ button. Type in a вЂњGroup NameвЂќ such as вЂњremotedesktop.вЂќ Next type in вЂњ445вЂќ to вЂњ445вЂќ and click the вЂњAdd >вЂќ button. Type in вЂњ137вЂќ to вЂњ139вЂќ and click the вЂњAdd >вЂќ button. Type in a вЂњGroup NameвЂќ such as вЂњfileshare.вЂќ This is helpful (especially http and https), but there are probably services youвЂ™ll use that arenвЂ™t listed here.

YouвЂ™ll see a list of pre-defined services.Click the вЂњServicesвЂќ tab in the right pane. First, we are going to define the services we want to let through.So, to use our internal IP address as a server, we need to open the firewall to allow traffic to come to this device. Now all packets which are allowed through the firewall and are addressed to the outside IP address we just named will be delivered to the internal IP address. Enter the outside, routable IP which you want to use to access the device from outside the firewall.ДЄllowing traffic through the firewall, or Port Forwarding.Under вЂњStatic Translation,вЂќ change the Interface to: вЂњoutside.вЂќ.Under вЂњReal AddressвЂќ type the destination, or internal address.Click вЂњAdd,вЂќ then select вЂњAdd Static NAT RuleвЂ¦вЂќ.Click вЂњConfigurationвЂќ at the top, then вЂњNATвЂќ on the left.

#Cisco asa 5505 asdm configuration example software#

Use the ASDM software to log into your device.

IвЂ™m going to go through the steps I went through to set up NAT and port forwarding using the ASDM software. This is all very easy to do on consumer grade hardware, but itвЂ™s difficult to do on the ASA5505 using the Cisco ASDM. The decision on what to allow through is based on what port the traffic is coming in on. Of course, because itвЂ™s a firewall, we need to tell the ASA5055 what traffic to allow through the firewall to the inside address.

It means that we can have a public IP outside the Cisco Firewall, and it will route traffic inside to the internal address we select. What is NAT? It stands for Network Address Translation.