ASA traffic flow question

andrewswanson — Tue, 12 Mar 2019 07:01:13 GMT

Hello

I have an edge ASA 5585-X SSP 20 (asa915-smp-k8.bin) which currently has SSL VPN enabled on the Outside interface for use by clients outside. I've been asked to move the termination of SSL VPN for Outside clients onto another ASA interface but I'm running into the same kind of issue highlighted in th following thread:

https://supportforums.cisco.com/discussion/11708986/should-inside-host-be-able-ping-asa-dmz-interface-ip

In the thread someone states that:

"traffic going to a distant, far-end interface will not be accepted by the ASA"

Is it the case that the traffic entering an ASA on one interface cannot be destined for the IP address of another ASA interface?

Thanks
Andy

Yes that is the case (except

Marvin Rhoads — Wed, 09 Dec 2015 17:01:58 GMT

Yes that is the case (except for some corner case exceptions for ASA management).

Thanks for the prompt

andrewswanson — Wed, 09 Dec 2015 17:03:37 GMT

Thanks for the prompt response Marvin

Cheers

Andy

topic Thanks for the prompt in Network Security

ASA traffic flow question

Yes that is the case (except

Thanks for the prompt