Do you wish there was a
netstat command for a Cisco ASA? Are you looking to see what ports the ASA has open and is listening on? Try this command:
This command displays all of the ports that are open and established on the ASA.
state indicates whether the port is listening or established.
local address says which IP it’s listening on. In the example above, 220.127.116.11 is the outside interface and the 172.16.3.1 is the inside interface.
foreign address will show up when someone connects to that port. In this case I was ssh’d into the firewall coming from 172.16.2.3.
The output above should be a direct reflection of the
http commands in the ASA.