Cisco FirePOWER ASA 5500 series User Manual

18-2
Cisco Security Appliance Command Line Configuration Guide
OL-10088-01
Chapter 18 Permitting or Denying Network Access
Inbound and Outbound Access List Overview
You might want to use an outbound access list to simplify your access list configuration. For example,
if you want to allow three inside networks on three different interfaces to access each other, you can
create a simple inbound access list that allows all traffic on each inside interface (see Figure 18-1).
Figure 18-1 Inbound Access Lists
See the following commands for this example:
hostname(config)# access-list INSIDE extended permit ip any any
hostname(config)# access-group INSIDE in interface inside
hostname(config)# access-list HR extended permit ip any any
hostname(config)# access-group HR in interface hr
hostname(config)# access-list ENG extended permit ip any any
hostname(config)# access-group ENG in interface eng
Web Server:
209.165.200.225
10.1.2.0/24
10.1.3.0/24
10.1.1.0/24
Inside
Eng
Outside
ACL Inbound
Permit from any to any
ACL Inbound
Permit from any to any
ACL Inbound
Permit from any to any
132211
Security
appliance

Cisco FirePOWER ASA 5500 series Specifications

General

Brand	Cisco
Model	FirePOWER ASA 5500 series
Category	Firewall
Language	English