Cisco ISA500 Series Administration Manual page 196

Firewall
Firewall Access Rule Configuration Examples
STEP 6
Cisco ISA500 Series Integrated Security Appliance Administrator Guide
Original services
Translated source
address
Translated destination
address
Translated services
Then go to the Firewall -> ACL Rules -> Rule page to create a firewall access rule
as follows to allow the access:
From Zone
To Zone
Services
Source Address
Destination Address
Match Action
Allowing Inbound Traffic from Specified Range of Outside Hosts
User Case: You want to allow incoming video conferencing to be initiated from a
restricted range of outside IP addresses (132.177.88.2 to 132.177.88.254).
Solution: Create a range address object with the range 132.177.88.2 to
132.177.88.254 called "OutsideNetwork" and a host address object with the IP
address 192.168.1.110 called "InternalIP", and then create an access rule as
follows. In the example, connections for CU-SeeMe (an Internet video-conferencing
client) are allowed only from a specified range of external IP addresses.
Parameter
From Zone
To Zone
Services
RDP
ANY
RDPServer
RDP
WAN
DMZ
RDP
ANY
RDPServer
Permit
Value
WAN
LAN
CU-SEEME
6
190