User's Manual

Firewall
Firewall Access Rule Configuration Examples
Cisco ISA500 Series Integrated Security Appliance Administrator Guide 189
6
Allowing Inbound Traffic to the RDP Server using a Specified Public IP address
User Case: You host a RDP server on the DMZ. Your ISP has provided a static IP
address that you want to expose to the public as your RDP server address. You
want to allow Internet user to access the internal RDP server by using the
specified public IP address.
Solution: You can create a port forwarding rule or an Advanced NAT rule and a
firewall access rule as follows to allow inbound traffic to the RDP server.
Problem: DMZ Wizard?
STEP 1 Set the IP address of 172.39.202.101 to the WAN interface.
STEP 2 Create a host address object with the IP 192.168.12.101 called “RDPServer” and a
host address object with the IP 172.39.202.102 called “PublicIP”.
STEP 3 Create a TCP service object with the port range from 3389 to 3389 called “RDP”.
STEP 4 Go to the Firewall -> NAT -> Port Forwarding page to create a port forwarding
rule as follows.
STEP 5 Or go to the Firewall -> NAT -> Advanced NAT page to create an Advanced NAT
rule as follows.
Original Service RDP
Translated Service RDP
Translated IP RDPServer
WAN WAN1
WAN IP PublicIP
Enable Port Forwarding On
From WAN1
To DMZ
Original source address ANY
Original destination
address
PublicIP