Configuring The Security Appliance For A Dmz Deployment; Configuration Requirements - Cisco ASA 5505 Getting Started Manual

Chapter 6 Scenario: DMZ Configuration
Configuring the Security Appliance for a DMZ
Deployment

Configuration Requirements

78-17612-02
The procedures for creating this configuration are detailed in the remainder of this
chapter.
This section describes how to use ASDM to configure the adaptive security
appliance for the configuration scenario shown in
sample parameters based on the scenario.
This configuration procedure assumes that the adaptive security appliance already
has interfaces configured for the inside interface, the outside interface, and the
DMZ interface. Set up interfaces on the adaptive security appliance by using the
Startup Wizard in ASDM. Be sure that the DMZ interface security level is set
between 0 and 100. (A common choice is 50.)
For more information about using the Startup Wizard, see
"Configuring the Adaptive Security Appliance."
The section includes the following topics:
Configuration Requirements, page 6-5
•
Starting ASDM, page 6-6
•
Enabling Inside Clients to Communicate with Devices on the Internet,
•
page 6-7
Enabling Inside Clients to Communicate with the DMZ Web Server, page 6-8
•
Configuring an External Identity for the DMZ Web Server, page 6-12
•
Providing Public HTTP Access to the DMZ Web Server, page 6-15
•
The following sections provide detailed instructions for how to perform each step.
Configuring the adaptive security appliance for this DMZ deployment requires the
following:
• Internal clients need to be able to communicate with devices on the Internet.

Configuring the Security Appliance for a DMZ Deployment

Figure
Cisco ASA 5505 Getting Started Guide
6-1. The procedure uses
Chapter 5,
6-5