CCSP/CCVP --ASA 5520配置例子

　　ftp mode passive

　　clock timezone cet 8

　　dns domain-lookup inside_data

　　dns name-server 172.26.16.17

　　same-security-traffic permit inter-interface　　　　　

　　same-security-traffic permit intra-interface

　　object-group icmp-type icmp_echo_request

　　icmp-object echo

　　object-group icmp-type icmp_echo_reply

　　icmp-object echo-reply

　　object-group icmp-type ICMP_echo

　　group-object icmp_echo_request

　　group-object icmp_echo_reply

　　object-group service udp_tftp udp

　　port-object eq tftp

　　object-group service udp_citrix udp

　　port-object eq 1604

　　object-group service udp_radius udp

　　port-object eq 1812

　　object-group service udp_radius_acct udp

　　port-object eq 1813

　　object-group service udp_rsa_5500 udp

　　port-object eq 5500

　　object-group service tcp_http tcp

　　port-object eq www

　　object-group service tcp_http_8080 tcp

　　port-object eq 8080

　　object-group service tcp_https tcp

　　port-object eq https

　　object-group service tcp_ftp tcp

　　port-object eq ftp

　　object-group service tcp_ntp tcp

　　port-object eq 123

　　object-group service udp_ntp udp

　　port-object eq ntp

　　object-group service tcp_smtp tcp

　　port-object eq smtp

　　object-group service tcp_ssh tcp

　　port-object eq ssh

　　object-group service tcp_squid_3128 tcp