Port Forwarding on a Cisco ASA or PIX

The below example shows how to open up a Cisco PIX or ASA firewall to allow direct connections to a server on the inside network. In general you need a NAT and access rule to make this work. This is known as adding a static NAT rule or “port forwarding”.

ASA Version 8.3

In the latest versions you can create a NAT rule from the network object. Click on the NAT arrow and fill in the details as shown below.

You then need to create a corresponding access rule

PIX Version 7.2(1)

This shows how to publish a web server (HTTPS)

Access Rule:

 

NAT rule:

Leave a Reply

Your email address will not be published. Required fields are marked *