User's Manual

Firewall
Firewall Access Rule Configuration Examples
Cisco ISA500 Series Integrated Security Appliance Administrator Guide 190
6
STEP 6 Then go to the Firewall -> ACL Rules -> Rule page to create a firewall access rule
as follows to allow the access:
Allowing Inbound Traffic from Specified Range of Outside Hosts
User Case: You want to allow incoming video conferencing to be initiated from a
restricted range of outside IP addresses (132.177.88.2 to 132.177.88.254).
Solution: Create a range address object with the range 132.177.88.2 to
132.177.88.254 called “OutsideNetwork” and a host address object with the IP
address 192.168.1.110 called “InternalIP”, and then create an access rule as
follows. In the example, connections for CU-SeeMe (an Internet video-conferencing
client) are allowed only from a specified range of external IP addresses.
Original services RDP
Translated source
address
ANY
Translated destination
address
RDPServer
Translated services RDP
From Zone WAN
To Zone DMZ
Services RDP
Source Address ANY
Destination Address RDPServer
Match Action Permit
Parameter Value
From Zone WAN
To Zone LAN
Services CU-SEEME