Providing Public Http Access To The Dmz Web Server - Cisco ASA 5505 Getting Started Manual

Chapter 6 Scenario: DMZ Configuration

Providing Public HTTP Access to the DMZ Web Server

Step 1
Step 2
Step 3
Step 4
Step 5
78-17612-02
By default, the adaptive security appliance denies all traffic coming in from the
public network. To permit traffic coming from the Internet to access the DMZ web
server, you must configure an access control rule permitting incoming HTTP
traffic destined for the DMZ web server.
This access control rule specifies the interface of the adaptive security appliance
that processes the traffic, that the traffic is incoming, the origin and destination of
the traffic, and the type of traffic protocol and service to be permitted.
In this section, you create an access rule that permits incoming HTTP traffic
originating from any host or network on the Internet, if the destination of the
traffic is the web server on the DMZ network. All other traffic coming in from the
public network is denied.
To configure the access control rule, perform the following steps:
In the ASDM main window, do the following:
Choose Configuration > Security Policy.
a.
b. Click the Access Rules tab, then from the Add pull-down list, choose Add
Access Rule.
The Add Access Rule dialog box appears.
In the Interface and Action area, do the following:
From the Interface drop-down list, choose Outside.
a.
b. From the Direction drop-down list, choose Incoming.
From the Action drop-down list, choose Permit.
c.
In the Source area, choose the Any keyword from the Type drop-down list to allow
traffic originating from any host or network.
In the Destination area, do the following:
From the Type drop-down list, choose the Interface IP keyword.
a.
From the Interface drop-down list, choose Outside.
b.
In the Protocol and Service area, specify the type of traffic that you want to permit
through the adaptive security appliance.
From the Protocol drop-down list, choose tcp.
a.
Configuring the Security Appliance for a DMZ Deployment
Cisco ASA 5505 Getting Started Guide
6-15