Quick how to for FQDN ACL on ASA.
These are not recommended, but still possible.
Create Objects
|
0 1 2 3 4 5 6 7 |
object-group network MY_OBJ network-object host 172.22.32.25 network-object host 172.22.32.26 object network OBJ-outlook.office365.com fqdn outlook.office365.com |
Create ACL
|
0 1 2 |
access-list FW-LB extended permit tcp object-group MY_OBJ object OBJ-outlook.office365.com eq smtp |
Need DNS servers
|
0 1 2 3 4 5 6 7 8 |
conf t dns domain-lookup outside DNS server-group DefaultDNS name-server 8.8.8.8 name-server 1.1.1.1 end wr |
Test
|
0 1 2 3 4 5 6 |
ping outlook.office365.com Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 40.97.113.34, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 30/30/30 ms |