Cisco ASA 5505 Getting Started Manual page 69

Chapter 6 Scenario: DMZ Configuration
c.
In the Destination area, do the following:
Step 4
In the IP address field, enter the public IP address of the destination host or
network, such as a web server. (In this scenario, the public IP address of the DMZ
web server is 209.165.200.226.)
In the Protocol and Service area, specify the type of traffic that you want to permit
Step 5
through the adaptive security appliance.
a.
b.
c.
78-17612-01
Alternatively, if the address of the source host or network is preconfigured,
choose the source IP address from the IP Address drop-down list.
Enter the netmask for the source IP address or select one from the Netmask
drop-down list.
From the Protocol drop-down list, choose tcp.
In the Source Port area, click the Service radio button, choose "=" (equal to)
from the Service drop-down list, and then choose Any from the next
drop-down list.
In the Destination Port area, click the Service radio button, choose "=" (equal
to) from the Service drop-down list, and then choose HTTP/WWW from the
next drop-down list.
Configuring the Security Appliance for a DMZ Deployment
Cisco ASA 5505 Getting Started Guide
6-21