topic Upgrade the ASA to the 9.1 or in Network Access Control

ISE | Inline VPN deployment Issue

Khaled El-Metwaly — Mon, 11 Mar 2019 05:34:45 GMT

Hi,

I have ASA which I use for internet access and VPN gateway. I am trying to deploy ISE inline VPN node, but i found that the users traffic (from inside to internet) denied by the Inline node (users return traffic from untrusted port to trusted is blocked).... It is only permitted if i add the real IP subnet , i need to access , in the filter tab.

This is not practical because i can not exclude all internet addresses.

My questions are:

1) Is Inline VPN designed to be used only with dedicated VPN GWs?

2)Is there any workaround for this?

Thanks for any support.

Upgrade the ASA to the 9.1 or

khaled alodat — Fri, 10 Apr 2015 12:19:02 GMT

Upgrade the ASA to the 9.1 or earlier, the inline VPN is not required in the new code

The ASA code you need is 9.2

Charlie Moreton — Fri, 10 Apr 2015 15:15:22 GMT

The ASA code you need is 9.2.1 or later. This allows the ASA to perform CoA, thus negating the need for the Inline Posture Node.

In which mode is the IPN working? Bridged or Routed?

Please Rate Helpful posts and mark this question as answered if, in fact, this does answer your question. Otherwise, feel free to post follow-up questions.

Charles Moreton