sa520w allow IP range from WAN

[fs483]

Hello,

I was wondering if we can restrict an IP range (on the WAN)that can access internal server through SMTP? My customer uses a third-party anti-spam provider and we wish open the firewall only the IPs of the anti-spam provider on the SMTP port. I know how to do it on Pix and ASA but didn't seem to find how to do it on the SA. I found that I can lock 1 single IP range but the anti-spam provider has multiple non continuous IP ranges. I would be surprised you that you can do that on a SA520.

Thanks,
fs483

 

[fs483]

I figured it out. Just create a new rule for each range of IP that you want to allow through.