Firewall
Firewall and NAT Rule Configuration Examples
Cisco ISA500 Series Integrated Security Appliances Administration Guide
228
6
NOTE
When you create the port forwarding rule, you can check
Create Firewall
Rule
to automatically generate the firewall rule.
Allowing Inbound Traffic Using a Public IP Address
Use Case:
You host an RDP server on the DMZ. Your ISP has provided a static IP
address that you want to expose to the public as your RDP server address. You
want to allow Internet user to access the RDP server by using the specified public
IP address.
Solution 1:
Perform the following tasks to complete the configuration:
STEP 1
Go to the Networking > Address Management
page to create a host address
object with the IP 192.168.12.101 called “RDPServer” and a host address object
with the IP 172.39.202.102 called “PublicIP.”
STEP 2
Go to the Networking > Service Management
page to create a TCP service object
with the port 3389 called “RDP.”
STEP 3
Go to the Firewall > NAT > Port Forwarding
page to create a port forwarding rule
as follows.
Source Address
ANY
Destination Address
InternalFTP
Match Action
Permit
Original Service
RDP
Translated Service
RDP
Translated IP
RDPServer
WAN
WAN1
WAN IP
PublicIP
Enable Port
Forwarding
On
Create Firewall Rule
On
