Advertisement

There's no such thing as a stupid question, but they're the easiest to answer.
Login
Search

Advertisement

Search Search
Search for:
Tech Support Guy > > >

How to block internet access for an IP on ASA 5505


(!)

lesky's Avatar
lesky lesky is offline
Junior Member with 1 posts.
THREAD STARTER
 
Join Date: Mar 2011
Experience: Intermediate
15-Mar-2011, 05:59 AM #1
How to block internet access for an IP on ASA 5505
Hi all,

How do I configure Cisco ASA 5505 (using ASDM 5.2) to block a workstation (IP address) from accessing internet completely? I was trying to set up a new incoming access rule for outside interface to deny any IP traffic to that workstation but it doesn't work from some reason - the workstation can still access the internet. The ASA has no special settings, only a few ports opened for servers (see attached screenshot).

Thanks.
Attached Thumbnails
How to block internet access for an IP on ASA 5505-asa_screenshot.jpg  
zx10guy's Avatar
Computer Specs
Trusted Advisor with 4,095 posts.
 
Join Date: Mar 2008
15-Mar-2011, 09:10 AM #2
I don't think that rule is working because the return traffic from the internet is going to have a destination IP address of your public IP you're using to NAT your internal IPs (assuming you're using a NAT overload.) I think you'll have to do it from the inside interface and it's usually best practices to put ACL restrictions closests to the host traffic you're trying to regulate. The reason is you cut down on unnecessary processing of return traffic which wouldn't normally need to be processed.
As Seen On

BBC, Reader's Digest, PC Magazine, Today Show, Money Magazine
WELCOME TO TECH SUPPORT GUY!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.


Tags
access rule, asa, block internet access, firewall

(clock)
THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools


WELCOME
You Are Using: Server ID
Trusted Website Back to the Top ↑

Content Relevant URLs by vBSEO 3.3.2