sneedmca/shadowbrokers-exploits
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
shadowbrokers-exploits/swift/00713_0_ensbdfw4-2013sep06

934 lines
43 KiB
Text
Raw Normal View History

Inital commit of Shadowbrokers 'Lost in Translation' release
2017-04-14 04:45:07 -05:00
: Saved
: Written by enable_15 at 05:59:45.713 UTC Fri Sep 6 2013
!
PIX Version 8.0(2)
!
hostname ENSBUSPIX
domain-name sag
enable password Ro5XpDeSuehPBEdi encrypted
names
name 192.168.202.20 sag-srv2
name 192.168.211.17 vpn1-2-nsrp
name 192.168.211.16 vpn2-int
name 192.168.211.15 vpn1-int
name 172.28.0.70 FEBKUS6L-LA-ws2
name 172.28.0.71 FEBKUS6L-LA-ws3
name 172.28.0.72 FEBKUS6L-LA-ws4
name 172.28.0.73 FEBKUS6L-LA-ws5
name 172.28.0.74 FEBKUS6L-LA-ws6
name 172.28.0.199 FEBKUS6L-IR-ws3
name 172.28.0.200 FEBKUS6L-IR-ws4
name 172.28.0.201 FEBKUS6L-IR-ws5
name 172.28.0.202 FEBKUS6L-IR-ws6
name 172.28.0.203 FEBKUS6L-IR-ws7
name 10.100.200.0 ensb-mgmt-nw
name 192.168.211.0 ensb-dxb-nw
name 192.168.211.50 host-srv1
name 192.168.211.51 host-srv2
name 192.168.211.52 host-srv3
name 172.28.0.197 FEBKUS6L-IR-ws1
name 172.28.0.198 FEBKUS6L-IR-ws2
name 172.28.0.69 FEBKUS6L-LA-ws1
name 172.28.0.75 FEBKUS6L-LA-ws7
name 192.168.111.0 ensb-us-nw description US Network
name 192.168.213.201 unirisx-srv1
name 10.100.205.0 unirisx-mgmt-nw
name 192.168.213.202 unirisx-srv2
name 192.168.213.203 unirisx-srv3
name 172.28.1.68 IDXDUS33-ws1
name 172.28.1.69 IDXDUS33-ws2
name 172.28.1.70 IDXDUS33-ws3
name 10.100.210.0 unirisx-pharos-nw description Unirisx-Pharos Dial-in IP Pool
name 192.168.209.52 ensbusl3
name 192.168.209.50 ensbusl1
name 192.168.209.51 ensbusl2
name 192.168.208.0 ensb-dxb-mgmt-nw
name 172.28.1.133 RBBCUS6L-ws1
name 172.28.1.134 RBBCUS6L-ws2
name 192.168.214.100 finmex-srv1 description Finmex Portal Server1
name 10.100.215.0 finmex-mgmt-nw description finmex-mgmt-pool
name 172.28.1.193 GPSXUS55-loopback
name 172.28.1.194 GPSXUS55-mgmt1
name 172.28.1.195 GPSXUS55-mgmt2
name 172.28.1.196 GPSXUS55-nsrp
name 172.28.1.198 GPSXUS55-ws1
name 172.28.1.199 GPSXUS55-ws2
name 172.28.1.200 GPSXUS55-ws3
name 172.28.1.201 GPSXUS55-ws4
name 172.28.1.202 GPSXUS55-ws5
name 172.28.1.135 RBBCUS6L-ws3
name 172.28.1.136 RBBCUS6L-ws4
name 172.28.2.129 CAGPBMHM-LB
name 192.168.209.31 CAGP-SRV1
name 192.168.209.32 CAGP-SRV2
name 192.168.226.0 ensb-jo-nw
name 172.28.2.130 CAGPBMHM-MGMT-VPN1-OLD
name 172.28.2.132 CAGPBMHM-NSRP-OLD
name 10.149.10.0 nw-sslvpn-nw description ENSBNW SSLVPN IP
name 192.168.202.25 sagfin1
name 192.168.202.26 sagfin2
name 192.168.202.22 sagsns1
name 192.168.202.23 sagsns2
name 192.168.202.21 sagtest1
name 206.201.131.9 UNIRISX-KEYSRV
name 192.168.214.105 enMORE-srvr1
name 4.3.2.0 Vitname-NW
name 192.168.202.245 enFTP1
name 193.43.238.250 BICs-HomeSend-Test
name 193.43.238.249 BICs-HomeSend-Prod
name 192.168.214.51 SL1
name 192.168.202.30 swp-nlb
name 192.168.202.28 swp-srv1
name 192.168.202.29 swp-srv2
name 192.168.214.106 enMORE-srvr2
name 10.100.220.0 cs-support-nw
name 192.168.214.107 enMORE-srvr3
name 192.168.214.108 enMORE-srvr4
name 192.168.211.230 en.MoreWebSRVR1 description en.More Web Server 1
name 84.45.85.251 RemitONE-Srvr1 description RemitONE Public IP 1
name 84.45.85.253 RemitONE-Srvr2 description RemitONE Public IP 2
name 84.45.85.222 RemitONE-Test_Srvr1 description RemitONE Public IP 3
name 84.45.85.199 RemitONE-Srvr3
name 84.45.85.195 RemitONE-Srvr4
name 192.168.202.101 ensbdrsa2
dns-guard
!
interface Ethernet0
nameif clients
security-level 10
ip address 192.168.211.1 255.255.255.0
!
interface Ethernet1
nameif host
security-level 70
ip address 192.168.209.1 255.255.255.0
!
interface Ethernet2
nameif sag
security-level 80
ip address 192.168.202.4 255.255.255.0
!
interface Ethernet3
description unirisx zone
nameif unirisx
security-level 30
ip address 192.168.213.1 255.255.255.0
!
interface Ethernet4
description mgmt zone
nameif mgmt
security-level 50
ip address 192.168.208.4 255.255.255.0
!
interface Ethernet5
no nameif
no security-level
no ip address
!
interface Ethernet5.1
description Finemx Portal Interface
vlan 214
nameif finmex
security-level 20
ip address 192.168.214.1 255.255.255.0
!
passwd Ro5XpDeSuehPBEdi encrypted
banner login EastNets Service Bureau
banner login NOTICE TO USERS
banner login This computer is a property of EastNets (R). Any or all use of this system is governed by the Security Policies of EastNets Service Bureau (ENSB).
banner login Any or all uses of this system, and all files on this system may be monitored, recorded, audited, or inspected at the discretion of EastNets Management.
banner login Unauthorized or improper use of this system may result in administrative disciplinary action and civil and criminal penalties. By continuing to use this system you indicate your awareness of and consent to these terms and conditions of use. LOG OFF IMMEDIATELY if you do not agree to the conditions stated in this warning.
banner login Please contact ENSB Infrastructure Team to obtain a copy of the Security Policy or visit ENSB portal at http://entranet.eastnets.com/sites/ENSB/.
ftp mode passive
dns domain-lookup clients
dns domain-lookup host
dns domain-lookup sag
dns domain-lookup unirisx
dns domain-lookup mgmt
dns domain-lookup finmex
dns server-group DefaultDNS
domain-name sag
object-group network sag-servers-prod
network-object host sagsns1
network-object host sagfin2
object-group network ensb-vpns-group
network-object vpn1-int 255.255.255.255
network-object vpn2-int 255.255.255.255
network-object vpn1-2-nsrp 255.255.255.255
object-group service msih-ports-udp udp
port-object range 9000 9059
port-object range 48200 48200
port-object range 48100 48105
port-object range 135 135
port-object range 48002 48009
port-object range 6500 6501
port-object range 1029 1029
object-group service msih-ports-udp-casmf udp
port-object range 5101 5105
port-object range 5206 5207
object-group service swift-dns-port udp
port-object range domain domain
object-group service symantec-av udp
port-object range 38293 38293
port-object range 2967 2967
object-group service FMSIH-OUT-TCP tcp
port-object range 9100 9106
port-object range 6500 6501
object-group service FMSIH-OUT-TCP-CASMF tcp
group-object FMSIH-OUT-TCP
port-object range 5206 5207
port-object range 5101 5105
object-group service FMSIH-PRINT-TCP tcp
port-object range 9100 9106
object-group service msih-ports-tcp tcp
port-object range 9000 9059
port-object range 48200 48200
port-object range 48100 48105
port-object range 135 135
port-object range 48009 48009
port-object range 6500 6501
port-object range 1029 1029
port-object eq ssh
object-group service msih-ports-tcp-casmf tcp
group-object msih-ports-tcp
port-object range 5206 5207
port-object range 5101 5105
object-group service snmp tcp-udp
port-object range 161 162
object-group service doubletake tcp-udp
port-object range 1105 1106
port-object range 1100 1100
object-group service msih-ports tcp-udp
port-object range 48200 48200
port-object range 48100 48105
port-object range 135 135
port-object range 48009 48009
port-object range 6500 6501
port-object range 9000 9049
port-object range 1029 1029
object-group service shared-ports tcp
port-object range 445 445
port-object range netbios-ssn netbios-ssn
port-object range 137 137
port-object eq 138
object-group service swift-49168-9 tcp
port-object range 49168 49169
object-group service swift-cara-port tcp
port-object range 709 709
object-group service swift-dialup-port tcp
port-object eq www
object-group service swift-direcotry-ports tcp
port-object range 1400 1409
port-object range 1600 1609
port-object range 1100 1109
port-object range ldap ldap
port-object range 1300 1309
port-object range 1500 1509
port-object range 1200 1209
object-group service swift-myswift-webserver-port tcp
port-object range https https
object-group service swift-rvs-port tcp
port-object range 49170 49170
object-group service swift-secrets-webserver-port tcp
port-object range 49172 49172
object-group service swift-switch-ports tcp
port-object range 50153 50190
port-object range 52100 52399
port-object range 49500 49510
port-object range 50200 50806
object-group service swift-web-connector-ports tcp
port-object eq www
port-object range 49171 49171
object-group service vnc-port tcp
port-object range 5800 5800
port-object range 5900 5900
object-group network sag-srv-test
network-object sagsns1 255.255.255.255
object-group network sag-servers-prod_ref
network-object 192.168.246.20 255.255.255.255
network-object 192.168.246.25 255.255.255.255
network-object 192.168.209.25 255.255.255.255
network-object 192.168.209.20 255.255.255.255
object-group network ensb-dxb-nw
network-object ensb-dxb-nw 255.255.255.0
object-group service web-ports tcp
port-object eq www
port-object eq https
object-group network sag-servers-prod1
network-object sag-srv2 255.255.255.255
network-object sagfin1 255.255.255.255
object-group network sag-servers-prod_ref_1
network-object 192.168.211.25 255.255.255.255
network-object 192.168.211.20 255.255.255.255
object-group network FEBKUS6L-ws-nw
network-object FEBKUS6L-LA-ws2 255.255.255.255
network-object FEBKUS6L-LA-ws3 255.255.255.255
network-object FEBKUS6L-LA-ws4 255.255.255.255
network-object FEBKUS6L-LA-ws5 255.255.255.255
network-object FEBKUS6L-LA-ws6 255.255.255.255
network-object FEBKUS6L-LA-ws7 255.255.255.255
network-object FEBKUS6L-IR-ws2 255.255.255.255
network-object FEBKUS6L-IR-ws3 255.255.255.255
network-object FEBKUS6L-IR-ws4 255.255.255.255
network-object FEBKUS6L-IR-ws5 255.255.255.255
network-object FEBKUS6L-IR-ws6 255.255.255.255
network-object FEBKUS6L-IR-ws7 255.255.255.255
network-object FEBKUS6L-LA-ws1 255.255.255.255
network-object host FEBKUS6L-IR-ws1
object-group network sharedsaa-saa-group
network-object host host-srv1
network-object host host-srv2
network-object host host-srv3
object-group network ensb-mgmt-nw
network-object ensb-mgmt-nw 255.255.255.0
network-object ensb-dxb-nw 255.255.255.0
network-object ensb-dxb-mgmt-nw 255.255.255.0
object-group protocol TCPUDP
protocol-object udp
protocol-object tcp
object-group protocol DM_INLINE_PROTOCOL_2
protocol-object udp
protocol-object tcp
object-group network ensb-us-nw
network-object ensb-us-nw 255.255.255.0
object-group network unirisx-srv-group
network-object host 192.168.211.201
network-object host 192.168.211.202
network-object host 192.168.211.203
object-group network unirisx-mgmt-group
network-object unirisx-mgmt-nw 255.255.255.0
object-group service RDP tcp
port-object eq 3389
object-group network IDXDUS33-nw
network-object host IDXDUS33-ws1
network-object host IDXDUS33-ws2
network-object host IDXDUS33-ws3
object-group network unirisx-pharos-group
network-object unirisx-pharos-nw 255.255.255.0
object-group network DM_INLINE_NETWORK_1
network-object host ensbusl1
network-object host ensbusl2
network-object host ensbusl3
network-object host CAGP-SRV1
network-object host CAGP-SRV2
object-group network DM_INLINE_NETWORK_2
network-object host ensbusl1
network-object host ensbusl2
network-object host ensbusl3
network-object host CAGP-SRV1
network-object host CAGP-SRV2
object-group network DM_INLINE_NETWORK_3
network-object host unirisx-srv1
network-object host unirisx-srv2
network-object host unirisx-srv3
object-group network DM_INLINE_NETWORK_4
network-object host unirisx-srv1
network-object host unirisx-srv2
network-object host unirisx-srv3
object-group network RBBCUS6L-ws-nw
network-object host RBBCUS6L-ws1
network-object host RBBCUS6L-ws2
network-object host RBBCUS6L-ws3
network-object host RBBCUS6L-ws4
object-group network finmex-mgmt-group
network-object finmex-mgmt-nw 255.255.255.0
object-group service DM_INLINE_SERVICE_1
service-object icmp
service-object tcp eq smtp
object-group network GPSXUS55-nw
network-object host GPSXUS55-loopback
network-object host GPSXUS55-mgmt1
network-object host GPSXUS55-mgmt2
network-object host GPSXUS55-nsrp
network-object host GPSXUS55-ws1
network-object host GPSXUS55-ws2
network-object host GPSXUS55-ws3
network-object host GPSXUS55-ws4
network-object host GPSXUS55-ws5
object-group network CAGPBMHM-nw
network-object host CAGPBMHM-NSRP-OLD
network-object host 172.28.2.133
network-object host 172.28.2.134
network-object host 172.28.2.135
network-object host 172.28.2.136
network-object host 172.28.2.137
network-object host 172.28.2.138
network-object host 172.28.2.139
network-object host 172.28.2.140
network-object host 172.28.2.141
network-object host 172.28.2.142
network-object host 172.28.2.143
network-object host 172.28.2.144
network-object host 172.28.2.145
network-object host CAGPBMHM-LB
network-object host CAGPBMHM-MGMT-VPN1-OLD
network-object host 172.28.2.146
network-object host 172.28.2.147
network-object host 172.28.2.148
network-object host 172.28.2.149
network-object host 172.28.2.150
network-object host 172.28.2.151
network-object host 172.28.2.152
network-object host 172.28.2.153
network-object host 172.28.2.154
network-object host 172.28.2.157
network-object host 172.28.2.158
network-object host 172.28.2.159
network-object host 172.28.2.160
network-object host 172.28.2.161
network-object host 172.28.2.162
network-object host 172.28.2.163
network-object host 172.28.2.164
network-object host 172.28.2.165
network-object host 172.28.2.166
network-object host 172.28.2.167
network-object host 172.28.2.168
network-object host 172.28.2.169
network-object host 172.28.2.170
network-object host 172.28.2.171
network-object host 172.28.2.173
network-object host 172.28.2.174
network-object host 172.28.2.172
network-object host 172.28.2.175
network-object host 172.28.2.176
network-object host 172.28.2.177
object-group network CAGP-SRV-GROUP
network-object host CAGP-SRV1
network-object host CAGP-SRV2
object-group service sidestation tcp
port-object eq 8401
object-group service sql tcp
port-object eq 1433
object-group service DM_INLINE_TCP_1 tcp
group-object msih-ports
port-object eq ftp
port-object eq ssh
group-object sidestation
group-object sql
object-group network CAPG-SRV-GROUP-NAT
network-object host 192.168.211.31
network-object host 192.168.211.32
object-group service Unirisx-Keysrv tcp
description keyserver.hostidp.com on TCP port 18021
port-object eq 18201
object-group network DM_INLINE_NETWORK_5
group-object sag-servers-prod
group-object sag-servers-prod1
object-group network en.More-srvr
network-object host enMORE-srvr1
network-object host enMORE-srvr2
network-object host enMORE-srvr3
network-object host enMORE-srvr4
object-group network en.More-srvr_ref
network-object host 192.168.211.105
network-object host 192.168.211.106
network-object host 192.168.211.107
network-object host 192.168.211.108
network-object host enMORE-srvr4
network-object host enMORE-srvr3
object-group network CAGPBMHM-NW-DR
network-object 172.28.2.192 255.255.255.192
object-group service DM_INLINE_TCP_3 tcp
group-object msih-ports
group-object sidestation
group-object sql
port-object eq ftp
port-object eq ssh
object-group network en.More_Customers
network-object Vitname-NW 255.255.255.0
object-group service DM_INLINE_TCP_2 tcp
port-object eq 4443
port-object eq 7777
port-object eq 8080
port-object eq 8081
port-object eq www
port-object eq https
port-object eq ftp
port-object eq ftp-data
object-group service DM_INLINE_TCP_4 tcp
port-object eq 4443
port-object eq 7777
port-object eq 8080
port-object eq 8081
port-object eq www
port-object eq https
port-object eq ftp
port-object eq ftp-data
object-group service DM_INLINE_TCP_5 tcp
port-object eq ftp
port-object eq ftp-data
port-object eq ssh
object-group service shared-ports-udp udp
port-object eq 139
port-object eq 445
port-object eq netbios-dgm
port-object eq netbios-ns
object-group service DM_INLINE_TCP_7 tcp
port-object eq ftp
port-object eq ftp-data
port-object eq ssh
object-group network ftp-srv_ref-clients
network-object host 192.168.211.115
object-group network ftp-srv_ref-finmex
network-object host 192.168.214.245
object-group network DM_INLINE_NETWORK_6
network-object host BICs-HomeSend-Prod
network-object host BICs-HomeSend-Test
object-group network DM_INLINE_NETWORK_7
network-object host BICs-HomeSend-Prod
network-object host BICs-HomeSend-Test
object-group service DM_INLINE_TCP_6 tcp
port-object eq ftp
port-object eq ftp-data
port-object eq ssh
object-group service DM_INLINE_SERVICE_2
service-object tcp eq www
service-object tcp eq https
service-object tcp-udp eq domain
object-group service DM_INLINE_TCP_8 tcp
port-object eq 3389
port-object eq www
port-object eq https
object-group service DM_INLINE_TCP_9 tcp
port-object eq www
port-object eq https
object-group service DM_INLINE_TCP_10 tcp
port-object eq ftp
port-object eq ftp-data
object-group network swp-srvrs
network-object host swp-srv1
network-object host swp-srv2
network-object host swp-nlb
object-group service DM_INLINE_SERVICE_3
service-object icmp
service-object tcp eq 48600
service-object tcp eq https
object-group network DM_INLINE_NETWORK_8
network-object host 192.168.211.105
network-object host 192.168.211.106
network-object host enMORE-srvr4
network-object host enMORE-srvr3
object-group network DM_INLINE_NETWORK_9
network-object host 192.168.211.105
network-object host 192.168.211.106
network-object host enMORE-srvr3
network-object host enMORE-srvr4
object-group network DM_INLINE_NETWORK_10
network-object host 192.168.211.105
network-object host 192.168.211.106
network-object host enMORE-srvr3
network-object host enMORE-srvr4
object-group network DM_INLINE_NETWORK_11
network-object host 192.168.211.105
network-object host 192.168.211.106
network-object host enMORE-srvr3
network-object host enMORE-srvr4
object-group service DM_INLINE_TCP_11 tcp
port-object eq 3389
port-object eq www
port-object eq https
object-group service mgmt-bkup-tcp tcp
port-object eq 445
port-object range 137 netbios-ssn
port-object eq 2967
port-object range 10000 10025
port-object range 10250 10275
object-group service mgmt-bkup-udp udp
port-object eq 445
port-object range netbios-ns 139
port-object eq 2967
port-object eq 38293
object-group network DM_INLINE_NETWORK_12
network-object host enMORE-srvr1
network-object host enMORE-srvr2
network-object host enMORE-srvr3
network-object host enMORE-srvr4
object-group network DM_INLINE_NETWORK_13
network-object host enMORE-srvr1
network-object host enMORE-srvr3
object-group network DM_INLINE_NETWORK_14
network-object host enMORE-srvr2
network-object host enMORE-srvr4
object-group network DM_INLINE_NETWORK_15
network-object host enMORE-srvr1
network-object host enMORE-srvr3
object-group network DM_INLINE_NETWORK_16
network-object host enMORE-srvr2
network-object host enMORE-srvr4
object-group network DM_INLINE_NETWORK_17
network-object host enMORE-srvr1
network-object host enMORE-srvr3
object-group network DM_INLINE_NETWORK_18
network-object host enMORE-srvr2
network-object host enMORE-srvr4
object-group service DM_INLINE_SERVICE_4
service-object tcp eq 8401
service-object udp eq 8401
object-group network en.More_Web_Servers
network-object host en.MoreWebSRVR1
object-group network DM_INLINE_NETWORK_19
group-object en.More-srvr
group-object en.More-srvr_ref
object-group network DM_INLINE_NETWORK_20
network-object host enMORE-srvr3
network-object host enMORE-srvr4
object-group service ReportingSvc tcp
port-object eq 1111
object-group service DM_INLINE_SERVICE_5
service-object tcp eq 135
service-object tcp eq 137
service-object tcp eq 138
service-object tcp eq 1433
service-object tcp eq 1434
service-object tcp eq ftp
service-object udp eq 135
service-object tcp range 5000 5100
service-object tcp eq 3372
service-object tcp eq 445
service-object udp eq 139
service-object udp eq 1434
service-object tcp eq 3389
service-object tcp eq 1111
object-group service DM_INLINE_SERVICE_6
service-object tcp eq 1111
service-object tcp eq 135
service-object tcp eq 137
service-object tcp eq 138
service-object tcp range 5000 5100
service-object tcp eq https
service-object tcp eq ssh
service-object udp eq 135
service-object tcp eq 1433
service-object tcp eq 1434
service-object tcp eq 3372
service-object tcp eq 445
service-object udp eq 139
service-object udp eq 1434
service-object tcp eq 3389
object-group network RemitONE-Srvrs
network-object host RemitONE-Test_Srvr1
network-object host RemitONE-Srvr1
network-object host RemitONE-Srvr2
network-object host RemitONE-Srvr3
object-group network DM_INLINE_NETWORK_21
network-object host enMORE-srvr3
network-object host enMORE-srvr4
object-group network DM_INLINE_NETWORK_22
network-object host enMORE-srvr3
network-object host enMORE-srvr4
object-group network DM_INLINE_NETWORK_23
network-object host 192.168.206.188
network-object host 192.168.206.189
object-group network DM_INLINE_NETWORK_24
network-object host 192.168.214.10
network-object host 192.168.214.11
object-group network DM_INLINE_NETWORK_25
network-object host enMORE-srvr3
network-object host enMORE-srvr4
object-group network DM_INLINE_NETWORK_26
network-object host enMORE-srvr3
network-object host enMORE-srvr4
object-group service DM_INLINE_TCP_12 tcp
port-object eq www
port-object eq https
object-group network DM_INLINE_NETWORK_27
network-object host 192.168.211.105
network-object host 192.168.211.106
object-group network DM_INLINE_NETWORK_28
network-object host 192.168.211.105
network-object host 192.168.211.106
object-group service DM_INLINE_TCP_13 tcp
port-object eq www
port-object eq https
access-list clients_access_in remark Allow en.More Level 3 MGMT Group to access en.More APP Servers
access-list clients_access_in extended permit tcp 10.100.150.0 255.255.255.240 object-group DM_INLINE_NETWORK_27 object-group DM_INLINE_TCP_13
access-list clients_access_in remark Deny any traffic from en.More Level 3 MGMT Group
access-list clients_access_in extended deny ip 10.100.150.0 255.255.255.240 object-group DM_INLINE_NETWORK_28
access-list clients_access_in remark Allow en.More Level 3 MGMT Group to access en.More Servers
access-list clients_access_in extended permit tcp 10.100.150.0 255.255.255.240 object-group DM_INLINE_NETWORK_25 object-group DM_INLINE_TCP_12
access-list clients_access_in remark Deny any traffic from en.More Level 3 MGMT Group
access-list clients_access_in extended deny ip 10.100.150.0 255.255.255.240 object-group DM_INLINE_NETWORK_26
access-list clients_access_in remark Allow HTTPS from RemitONE to en.More-srvr4
access-list clients_access_in extended permit tcp object-group RemitONE-Srvrs object-group DM_INLINE_NETWORK_21 eq https
access-list clients_access_in remark Deny any traffic from RemitONE to en.More-srvr4 for Security
access-list clients_access_in extended deny ip object-group RemitONE-Srvrs object-group DM_INLINE_NETWORK_22
access-list clients_access_in extended permit icmp any any
access-list clients_access_in extended permit tcp any object-group sag-servers-prod eq 48002
access-list clients_access_in extended permit tcp any object-group sag-servers-prod eq 48003
access-list clients_access_in extended permit tcp object-group en.More_Customers object-group en.More-srvr_ref eq www
access-list clients_access_in extended permit tcp object-group DM_INLINE_NETWORK_7 object-group en.More-srvr_ref object-group DM_INLINE_TCP_2
access-list clients_access_in extended permit tcp object-group en.More_Customers object-group ftp-srv_ref-clients object-group DM_INLINE_TCP_7
access-list clients_access_in extended permit tcp any object-group ftp-srv_ref-clients object-group DM_INLINE_TCP_6
access-list clients_access_in extended permit object-group DM_INLINE_PROTOCOL_2 object-group FEBKUS6L-ws-nw object-group sharedsaa-saa-group object-group msih-ports
access-list clients_access_in extended permit object-group DM_INLINE_PROTOCOL_2 object-group GPSXUS55-nw object-group sharedsaa-saa-group object-group msih-ports
access-list clients_access_in extended permit object-group DM_INLINE_PROTOCOL_2 object-group IDXDUS33-nw object-group sharedsaa-saa-group object-group msih-ports
access-list clients_access_in extended permit object-group DM_INLINE_PROTOCOL_2 object-group RBBCUS6L-ws-nw object-group sharedsaa-saa-group object-group msih-ports
access-list clients_access_in extended permit object-group DM_INLINE_PROTOCOL_2 object-group CAGPBMHM-nw object-group sharedsaa-saa-group object-group msih-ports
access-list clients_access_in extended permit object-group DM_INLINE_PROTOCOL_2 host ensb-us-nw object-group sharedsaa-saa-group object-group msih-ports
access-list clients_access_in extended permit tcp ensb-us-nw 255.255.255.0 object-group sharedsaa-saa-group eq 3389
access-list clients_access_in extended permit tcp ensb-mgmt-nw 255.255.255.0 object-group sharedsaa-saa-group eq 3389
access-list clients_access_in remark disconnect
access-list clients_access_in extended permit tcp unirisx-mgmt-nw 255.255.255.0 object-group unirisx-srv-group eq 3389 inactive
access-list clients_access_in extended permit ip object-group FEBKUS6L-ws-nw ensb-dxb-nw 255.255.255.0 inactive
access-list clients_access_in remark USA DC access to DXB DC
access-list clients_access_in extended permit ip ensb-us-nw 255.255.255.0 ensb-dxb-nw 255.255.255.0
access-list clients_access_in remark Unirisx Customer - disconnect
access-list clients_access_in extended permit tcp any object-group unirisx-srv-group object-group web-ports inactive
access-list clients_access_in remark Unirisx Customer - disconnect
access-list clients_access_in extended permit tcp any object-group unirisx-srv-group eq ftp inactive
access-list clients_access_in remark Unirisx Customer - disconnect
access-list clients_access_in extended permit icmp any object-group unirisx-srv-group inactive
access-list clients_access_in remark Unirisx Keysrv - disconnect
access-list clients_access_in extended permit tcp host UNIRISX-KEYSRV object-group unirisx-srv-group object-group Unirisx-Keysrv inactive
access-list clients_access_in remark ENSB mgmt
access-list clients_access_in extended permit ip ensb-mgmt-nw 255.255.255.0 any
access-list clients_access_in remark disconnect
access-list clients_access_in extended permit tcp unirisx-pharos-nw 255.255.255.0 host 192.168.211.203 eq 3389 inactive
access-list clients_access_in extended permit tcp finmex-mgmt-nw 255.255.255.0 host 192.168.211.100 eq 3389
access-list clients_access_in extended permit tcp finmex-mgmt-nw 255.255.255.0 object-group DM_INLINE_NETWORK_8 object-group DM_INLINE_TCP_8
access-list clients_access_in remark Access List between en.More Web Server and en.More Servers
access-list clients_access_in extended permit object-group DM_INLINE_SERVICE_5 object-group en.More_Web_Servers object-group DM_INLINE_NETWORK_19
access-list clients_access_in remark Access List between en.More Web Server and en.More Servers (reporting Service) (AD-06JUN2012)
access-list clients_access_in extended permit tcp object-group en.More_Web_Servers object-group DM_INLINE_NETWORK_20 object-group ReportingSvc
access-list clients_access_in remark Publish enMore Internet (requested by HM). AD.
access-list clients_access_in extended permit tcp any object-group DM_INLINE_NETWORK_9 object-group DM_INLINE_TCP_9
access-list clients_access_in remark Publish enMore ftp Internet. To be enabled when needed only. AD.
access-list clients_access_in extended permit tcp any object-group DM_INLINE_NETWORK_10 object-group DM_INLINE_TCP_10
access-list clients_access_in remark FOR TESTING PURPOSES ONLY. DISABLE AFTER TESTING
access-list clients_access_in extended permit tcp any object-group DM_INLINE_NETWORK_11 object-group DM_INLINE_TCP_11 inactive
access-list clients_access_in extended permit icmp any host 192.168.211.100
access-list clients_access_in extended permit tcp any host 192.168.211.100 object-group web-ports
access-list clients_access_in extended permit tcp any host 192.168.211.100 eq ftp
access-list clients_access_in extended permit tcp object-group CAGPBMHM-nw object-group CAPG-SRV-GROUP-NAT object-group DM_INLINE_TCP_1
access-list clients_access_in extended permit tcp object-group CAGPBMHM-NW-DR object-group CAPG-SRV-GROUP-NAT object-group DM_INLINE_TCP_3
access-list clients_access_in extended permit ip ensb-jo-nw 255.255.255.0 ensb-dxb-nw 255.255.255.0
access-list clients_access_in extended permit ip nw-sslvpn-nw 255.255.255.0 ensb-dxb-nw 255.255.255.0
access-list clients_access_in remark disabled April 1, 2013
access-list clients_access_in extended permit tcp any any eq 30003 inactive
access-list clients_access_in remark disabled April 1, 2013
access-list clients_access_in extended permit udp any any eq 30003 inactive
access-list clients_access_in extended permit udp any object-group en.More-srvr_ref eq nameserver
access-list clients_access_in extended permit object-group DM_INLINE_SERVICE_3 host 172.28.0.0 object-group swp-srvrs
access-list clients_access_in extended permit tcp cs-support-nw 255.255.255.0 host enMORE-srvr1 eq www
access-list clients_access_in extended permit tcp cs-support-nw 255.255.255.0 host enMORE-srvr1 eq https
access-list clients_access_in extended permit ip host en.MoreWebSRVR1 ensb-dxb-mgmt-nw 255.255.255.0
access-list clients_access_in extended permit icmp host en.MoreWebSRVR1 ensb-dxb-mgmt-nw 255.255.255.0
access-list sag_access_in extended permit icmp any object-group en.More-srvr
access-list sag_access_in extended permit ip any object-group en.More-srvr
access-list sag_access_in extended permit icmp any any
access-list sag_access_in extended permit tcp any any eq 3389
access-list sag_access_in extended permit ip any any
access-list swift_access_in extended permit ip any any
access-list Hosting extended permit object-group DM_INLINE_PROTOCOL_2 object-group CAGP-SRV-GROUP object-group CAGPBMHM-nw object-group msih-ports inactive
access-list Hosting extended permit icmp 192.168.209.0 255.255.255.0 ensb-us-nw 255.255.255.0
access-list Hosting extended permit tcp 192.168.209.0 255.255.255.0 ensb-us-nw 255.255.255.0 eq 3389
access-list Hosting extended permit icmp 192.168.209.0 255.255.255.0 any
access-list Hosting extended permit tcp 192.168.209.0 255.255.255.0 object-group sag-servers-prod eq 48002
access-list Hosting extended permit tcp 192.168.209.0 255.255.255.0 object-group sag-servers-prod eq 48003
access-list Hosting extended permit object-group TCPUDP object-group sharedsaa-saa-group object-group FEBKUS6L-ws-nw object-group msih-ports
access-list Hosting extended permit object-group DM_INLINE_PROTOCOL_2 object-group sharedsaa-saa-group object-group IDXDUS33-nw object-group msih-ports
access-list Hosting extended permit object-group DM_INLINE_PROTOCOL_2 object-group sharedsaa-saa-group object-group RBBCUS6L-ws-nw object-group msih-ports
access-list Hosting extended permit object-group DM_INLINE_PROTOCOL_2 object-group sharedsaa-saa-group object-group GPSXUS55-nw object-group msih-ports
access-list Hosting extended permit object-group DM_INLINE_PROTOCOL_2 object-group sharedsaa-saa-group object-group CAGPBMHM-nw object-group msih-ports
access-list Hosting extended permit tcp 192.168.209.0 255.255.255.0 any object-group FMSIH-PRINT-TCP
access-list Hosting extended permit ip 192.168.209.0 255.255.255.0 any log
access-list Hosting extended permit ip ensb-dxb-nw 255.255.255.0 ensb-jo-nw 255.255.255.0
access-list Hosting remark test only
access-list Hosting extended permit ip any any inactive
access-list Hosting extended permit ip host 192.168.211.31 any inactive
access-list Hosting extended permit icmp host 192.168.211.31 any inactive
access-list Hosting extended permit ip 192.168.209.0 255.255.255.0 192.168.200.0 255.255.255.0
access-list Hosting extended permit icmp 192.168.209.0 255.255.255.0 192.168.200.0 255.255.255.0
access-list Hosting extended permit icmp any any
access-list unirisx_access_in remark keyserver.hostidp.com on TCP port 18021
access-list unirisx_access_in extended permit tcp host unirisx-srv1 host UNIRISX-KEYSRV object-group Unirisx-Keysrv
access-list unirisx_access_in remark DNS for host. AD
access-list unirisx_access_in extended permit udp host unirisx-srv1 any eq domain
access-list unirisx_access_in extended permit ip 192.168.213.0 255.255.255.0 any
access-list unirisx_access_in extended permit icmp 192.168.213.0 255.255.255.0 any
access-list mgmt_access_in extended permit icmp ensb-dxb-mgmt-nw 255.255.255.0 object-group DM_INLINE_NETWORK_2
access-list mgmt_access_in extended permit ip ensb-dxb-mgmt-nw 255.255.255.0 object-group DM_INLINE_NETWORK_1
access-list mgmt_access_in extended permit icmp ensb-dxb-mgmt-nw 255.255.255.0 object-group DM_INLINE_NETWORK_3
access-list mgmt_access_in extended permit ip ensb-dxb-mgmt-nw 255.255.255.0 object-group DM_INLINE_NETWORK_4
access-list mgmt_access_in extended permit icmp any any
access-list mgmt_access_in extended permit ip ensb-dxb-mgmt-nw 255.255.255.0 object-group DM_INLINE_NETWORK_13
access-list mgmt_access_in extended permit ip ensb-dxb-mgmt-nw 255.255.255.0 object-group DM_INLINE_NETWORK_14
access-list mgmt_access_in extended permit tcp host enMORE-srvr1 ensb-dxb-mgmt-nw 255.255.255.0 object-group mgmt-bkup-tcp
access-list mgmt_access_in extended permit tcp host enMORE-srvr2 ensb-dxb-mgmt-nw 255.255.255.0 object-group mgmt-bkup-tcp
access-list mgmt_access_in extended permit udp host enMORE-srvr1 ensb-dxb-mgmt-nw 255.255.255.0 object-group mgmt-bkup-udp
access-list mgmt_access_in extended permit udp host enMORE-srvr2 ensb-dxb-mgmt-nw 255.255.255.0 object-group mgmt-bkup-udp
access-list mgmt_access_in extended permit ip host enMORE-srvr1 ensb-dxb-mgmt-nw 255.255.255.0
access-list mgmt_access_in extended permit ip host enMORE-srvr3 ensb-dxb-mgmt-nw 255.255.255.0
access-list mgmt_access_in extended permit ip host enMORE-srvr4 ensb-dxb-mgmt-nw 255.255.255.0
access-list mgmt_access_in extended permit ip ensb-dxb-mgmt-nw 255.255.255.0 host en.MoreWebSRVR1
access-list mgmt_access_in extended permit icmp ensb-dxb-mgmt-nw 255.255.255.0 host en.MoreWebSRVR1
access-list finmex_access_in remark Tempo Access List to update windows
access-list finmex_access_in extended permit tcp host enMORE-srvr4 object-group RemitONE-Srvrs eq https
access-list finmex_access_in extended permit ip host finmex-srv1 finmex-mgmt-nw 255.255.255.0
access-list finmex_access_in extended permit tcp host finmex-srv1 any object-group web-ports
access-list finmex_access_in extended permit tcp host finmex-srv1 any eq ftp
access-list finmex_access_in extended permit object-group DM_INLINE_PROTOCOL_2 host finmex-srv1 any eq domain
access-list finmex_access_in extended permit icmp host finmex-srv1 any
access-list finmex_access_in extended permit object-group DM_INLINE_SERVICE_1 host finmex-srv1 object-group DM_INLINE_NETWORK_5
access-list finmex_access_in remark Access List between en.More Servers and en.More Web Server
access-list finmex_access_in extended permit ip object-group en.More-srvr object-group en.More_Web_Servers inactive
access-list finmex_access_in remark Access List between en.More Servers and en.More Web Server
access-list finmex_access_in extended permit object-group DM_INLINE_SERVICE_6 object-group en.More-srvr object-group en.More_Web_Servers
access-list finmex_access_in extended permit icmp object-group en.More-srvr host 192.168.214.245
access-list finmex_access_in extended permit tcp host enMORE-srvr1 host SL1 eq ftp inactive
access-list finmex_access_in extended permit object-group DM_INLINE_SERVICE_4 object-group en.More-srvr object-group DM_INLINE_NETWORK_23
access-list finmex_access_in extended permit icmp object-group en.More-srvr any
access-list finmex_access_in extended permit icmp host enMORE-srvr2 any inactive
access-list finmex_access_in extended permit ip object-group en.More-srvr ensb-dxb-mgmt-nw 255.255.255.0 inactive
access-list finmex_access_in extended permit tcp object-group en.More-srvr object-group DM_INLINE_NETWORK_6 object-group DM_INLINE_TCP_4
access-list finmex_access_in remark Internet Access - For Licensing Only. To be disabled after use. AD
access-list finmex_access_in extended permit object-group DM_INLINE_SERVICE_2 object-group en.More-srvr any inactive
access-list finmex_access_in remark Internet Access - For Licensing Only. To be disabled after use. AD
access-list finmex_access_in extended permit object-group DM_INLINE_PROTOCOL_2 object-group en.More-srvr any eq domain inactive
access-list finmex_access_in extended permit tcp object-group en.More-srvr object-group ftp-srv_ref-finmex object-group DM_INLINE_TCP_5
access-list finmex_access_in remark Internet Access - For Licensing Only. To be disabled after use. AD
access-list finmex_access_in extended permit tcp object-group en.More-srvr any eq ftp inactive
access-list finmex_access_in extended permit ip object-group en.More-srvr object-group ftp-srv_ref-finmex
access-list finmex_access_in extended permit tcp object-group DM_INLINE_NETWORK_15 ensb-dxb-mgmt-nw 255.255.255.0 object-group mgmt-bkup-tcp
access-list finmex_access_in extended permit tcp object-group DM_INLINE_NETWORK_16 ensb-dxb-mgmt-nw 255.255.255.0 object-group mgmt-bkup-tcp
access-list finmex_access_in extended permit udp object-group DM_INLINE_NETWORK_17 ensb-dxb-mgmt-nw 255.255.255.0 object-group mgmt-bkup-udp
access-list finmex_access_in extended permit udp object-group DM_INLINE_NETWORK_18 ensb-dxb-mgmt-nw 255.255.255.0 object-group mgmt-bkup-udp
access-list finmex_access_in extended permit ip host enMORE-srvr1 ensb-dxb-mgmt-nw 255.255.255.0
access-list finmex_access_in extended permit ip object-group DM_INLINE_NETWORK_12 object-group DM_INLINE_NETWORK_24
pager lines 20
logging enable
logging asdm errors
mtu clients 1500
mtu host 1500
mtu sag 1500
mtu unirisx 1500
mtu mgmt 1500
mtu finmex 1500
failover
failover lan unit primary
icmp unreachable rate-limit 1 burst-size 1
icmp permit any finmex
asdm image flash:/asdm-602.bin
asdm location sag-srv2 255.255.255.255 sag
asdm location sagfin1 255.255.255.255 sag
asdm location vpn1-int 255.255.255.255 clients
asdm location vpn2-int 255.255.255.255 clients
asdm location vpn1-2-nsrp 255.255.255.255 clients
asdm location sagsns1 255.255.255.255 sag
asdm group sag-servers-prod sag
asdm group ensb-vpns-group clients
asdm group sag-srv-test sag
asdm group sag-servers-prod_ref clients reference sag-servers-prod
asdm group ensb-dxb-nw clients
no asdm history enable
arp timeout 14400
static (host,clients) host-srv1 ensbusl1 netmask 255.255.255.255
static (host,clients) host-srv2 ensbusl2 netmask 255.255.255.255
static (host,clients) host-srv3 ensbusl3 netmask 255.255.255.255
static (unirisx,clients) 192.168.211.201 unirisx-srv1 netmask 255.255.255.255
static (unirisx,clients) 192.168.211.202 unirisx-srv2 netmask 255.255.255.255
static (unirisx,clients) 192.168.211.203 unirisx-srv3 netmask 255.255.255.255
static (host,sag) 192.168.202.50 host-srv1 netmask 255.255.255.255
static (host,sag) 192.168.202.51 host-srv2 netmask 255.255.255.255
static (host,sag) 192.168.202.52 host-srv3 netmask 255.255.255.255
static (sag,finmex) 192.168.214.25 sagfin2 netmask 255.255.255.255
static (sag,clients) 192.168.211.22 sagsns1 netmask 255.255.255.255
static (finmex,clients) 192.168.211.100 finmex-srv1 netmask 255.255.255.255
static (finmex,sag) finmex-srv1 finmex-srv1 netmask 255.255.255.255
static (mgmt,finmex) 192.168.214.10 192.168.208.10 netmask 255.255.255.255
static (mgmt,finmex) 192.168.214.11 192.168.208.11 netmask 255.255.255.255
static (finmex,clients) 192.168.211.105 enMORE-srvr1 netmask 255.255.255.255
static (host,finmex) SL1 host-srv2 netmask 255.255.255.255
static (finmex,clients) 192.168.211.106 enMORE-srvr2 netmask 255.255.255.255
static (sag,host) 192.168.209.25 sagfin1 netmask 255.255.255.255
static (sag,clients) 192.168.211.25 sag-srv2 netmask 255.255.255.255
static (sag,clients) 192.168.211.208 192.168.200.208 netmask 255.255.255.255
static (sag,host) 192.168.209.208 192.168.200.208 netmask 255.255.255.255
static (sag,clients) 192.168.211.21 sagtest1 netmask 255.255.255.255
static (sag,finmex) 192.168.214.21 sagtest1 netmask 255.255.255.255
static (sag,host) 192.168.209.21 sagtest1 netmask 255.255.255.255
static (sag,host) 192.168.209.22 sagsns1 netmask 255.255.255.255
static (sag,clients) 192.168.211.115 enFTP1 netmask 255.255.255.255
static (sag,finmex) 192.168.214.245 enFTP1 netmask 255.255.255.255
static (sag,clients) 192.168.211.111 192.168.202.11 netmask 255.255.255.255
static (sag,clients) 192.168.211.28 swp-srv1 netmask 255.255.255.255
static (sag,clients) 192.168.211.29 swp-srv2 netmask 255.255.255.255
static (sag,clients) 192.168.211.30 swp-nlb netmask 255.255.255.255
static (host,clients) 192.168.211.31 CAGP-SRV2 netmask 255.255.255.255
static (host,clients) 192.168.211.32 CAGP-SRV1 netmask 255.255.255.255
static (finmex,clients) enMORE-srvr3 enMORE-srvr3 netmask 255.255.255.255
static (finmex,clients) enMORE-srvr4 enMORE-srvr4 netmask 255.255.255.255
static (sag,clients) 192.168.211.101 ensbdrsa2 netmask 255.255.255.255
access-group clients_access_in in interface clients
access-group Hosting in interface host
access-group sag_access_in in interface sag
access-group unirisx_access_in in interface unirisx
access-group mgmt_access_in in interface mgmt
access-group finmex_access_in in interface finmex
route clients 0.0.0.0 0.0.0.0 vpn1-2-nsrp 1
route sag 10.149.11.0 255.255.255.0 192.168.202.1 1
route clients ensb-us-nw 255.255.255.0 vpn1-2-nsrp 1
route sag 192.168.200.0 255.255.255.0 192.168.202.1 2
route sag ensb-dxb-mgmt-nw 255.255.255.0 192.168.202.1 5
route sag 192.168.216.22 255.255.255.255 192.168.202.1 2
route sag 192.168.216.25 255.255.255.255 192.168.202.1 2
route sag 192.168.216.33 255.255.255.255 192.168.202.1 2
route sag 192.168.218.0 255.255.255.0 192.168.202.1 2
route clients BICs-HomeSend-Prod 255.255.255.255 vpn1-2-nsrp 1
route clients BICs-HomeSend-Test 255.255.255.255 vpn1-2-nsrp 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout uauth 0:05:00 absolute
dynamic-access-policy-record DfltAccessPolicy
http server enable
http 192.168.209.0 255.255.255.0 host
http 192.168.202.0 255.255.255.0 sag
http ensb-dxb-mgmt-nw 255.255.255.0 mgmt
snmp-server host mgmt 192.168.208.11 community ^enSBSXstr1ng^
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
no crypto isakmp nat-traversal
telnet 192.168.209.0 255.255.255.0 host
telnet 192.168.202.0 255.255.255.0 sag
telnet ensb-dxb-mgmt-nw 255.255.255.0 mgmt
telnet timeout 5
ssh 192.168.208.11 255.255.255.255 mgmt
ssh timeout 5
console timeout 0
threat-detection basic-threat
threat-detection statistics access-list
!
class-map inspection_default
match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect netbios
inspect rsh
inspect rtsp
inspect skinny
inspect esmtp
inspect sqlnet
inspect sunrpc
inspect tftp
inspect sip
inspect xdmcp
!
service-policy global_policy global
tftp-server mgmt 192.168.208.10 /
username kbaluyot password veUjjfuhoN5j6Rty encrypted privilege 15
prompt hostname context
Cryptochecksum:8ddccd69852ef5593991d48ba55c81e9
: end
Reference in a new issue Copy permalink