<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Well, you have to use either in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/fast-access-but-secure/m-p/2540343#M234879</link>
    <description>&lt;P&gt;Well, you have to use either SSH, ASDM, Telnet or a console cable (directly connected) to manage the ASA.&amp;nbsp; Telnet is not a secure protocol and is not permitted to connect to the ASA on an interface that has a security level of 0.&lt;/P&gt;&lt;P&gt;So your most secure method of administering the ASA is to connect to VPN and then connect to the ASA using one of the methods.&lt;/P&gt;&lt;P&gt;--&lt;/P&gt;&lt;P&gt;Please remember to select a correct answer and rate helpfull posts&lt;/P&gt;</description>
    <pubDate>Thu, 04 Dec 2014 07:44:18 GMT</pubDate>
    <dc:creator>Marius Gunnerud</dc:creator>
    <dc:date>2014-12-04T07:44:18Z</dc:date>
    <item>
      <title>Fast access but secure</title>
      <link>https://community.cisco.com/t5/network-security/fast-access-but-secure/m-p/2540338#M234871</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I would like to know how &lt;SPAN class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="e4457db7-5c16-437a-98dc-28ccb33ce830" id="f7cc2390-d1d6-41bf-9506-a8973511690f"&gt;i&lt;/SPAN&gt; can configure my firewall ASA with an access from the outside &lt;SPAN class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="e4457db7-5c16-437a-98dc-28ccb33ce830" id="7f59b2fd-d2ee-410e-bb97-97cdebedf7a2"&gt;to&lt;/SPAN&gt; my &lt;SPAN class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="e4457db7-5c16-437a-98dc-28ccb33ce830" id="ed586255-d381-427b-90d6-0e133ddb7952"&gt;asa&lt;/SPAN&gt; device. I know that it would be better a &lt;SPAN class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="642acbed-edb4-41a3-a3e8-8a7ed86c8908" id="fa48a07e-b27f-4120-b67a-1e8efb7b7ad7"&gt;vpn&lt;/SPAN&gt;&amp;nbsp;but this is just to make some fast configurations and then log off.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thanks.&lt;/P&gt;</description>
      <pubDate>Tue, 12 Mar 2019 04:44:58 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/fast-access-but-secure/m-p/2540338#M234871</guid>
      <dc:creator>opnineopnine</dc:creator>
      <dc:date>2019-03-12T04:44:58Z</dc:date>
    </item>
    <item>
      <title>If you do not want to use a</title>
      <link>https://community.cisco.com/t5/network-security/fast-access-but-secure/m-p/2540339#M234872</link>
      <description>&lt;P&gt;If you do not want to use a VPN to connect to your ASA and configure it from there, then you could just enable SSH for the outside interface.&amp;nbsp; It would be best to allow only a specific IP, but if you receive a dynamic IP from your ISP then you might consider allowing any IP to connect to the outside interface (this is a major security risk and I do not recommend doing it).&amp;nbsp; The best would be if you were willing to set up a VPN, connect to the VPN and then ssh to the ASA.&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;username NAME password PASSWORD&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;crypto key generate rsa modulus 2048&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;aaa authentication ssh console LOCAL&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;ssh 0 0 outside&lt;/STRONG&gt;&lt;/P&gt;&lt;P&gt;&lt;STRONG&gt;ssh version 2&lt;/STRONG&gt;&amp;nbsp; &amp;lt;---use version 2 if at all possible&lt;/P&gt;&lt;P&gt;--&lt;/P&gt;&lt;P&gt;Please remember to select a correct answer and rate helpfull posts&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Fri, 12 Sep 2014 20:35:56 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/fast-access-but-secure/m-p/2540339#M234872</guid>
      <dc:creator>Marius Gunnerud</dc:creator>
      <dc:date>2014-09-12T20:35:56Z</dc:date>
    </item>
    <item>
      <title>Marius, Is there any vpn</title>
      <link>https://community.cisco.com/t5/network-security/fast-access-but-secure/m-p/2540340#M234873</link>
      <description>&lt;P&gt;Marius,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Is there any &lt;SPAN class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="66ec58b8-b7b3-456d-9d13-b1b172f13283" id="a8f8589c-befd-4ba2-b59a-ebb7d253f8cd"&gt;vpn&lt;/SPAN&gt;&amp;nbsp;config I can use to replace the ssh connection?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;SPAN class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="c971cfed-d9a8-4470-9497-3066a8b3c981" id="cd950e32-6e89-4233-98fb-9eff8c18ad75"&gt;thansk&lt;/SPAN&gt;.!&lt;/P&gt;</description>
      <pubDate>Wed, 03 Dec 2014 17:30:23 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/fast-access-but-secure/m-p/2540340#M234873</guid>
      <dc:creator>opnineopnine</dc:creator>
      <dc:date>2014-12-03T17:30:23Z</dc:date>
    </item>
    <item>
      <title>I am not sure I undersant</title>
      <link>https://community.cisco.com/t5/network-security/fast-access-but-secure/m-p/2540341#M234875</link>
      <description>&lt;P&gt;I am not sure I undersant your question.&amp;nbsp; Could you please clearify this a little more.&lt;/P&gt;&lt;P&gt;--&lt;/P&gt;&lt;P&gt;Please remember to select a correct answer and rate helpfull posts&lt;/P&gt;</description>
      <pubDate>Wed, 03 Dec 2014 19:32:54 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/fast-access-but-secure/m-p/2540341#M234875</guid>
      <dc:creator>Marius Gunnerud</dc:creator>
      <dc:date>2014-12-03T19:32:54Z</dc:date>
    </item>
    <item>
      <title>Insted for ssh what other</title>
      <link>https://community.cisco.com/t5/network-security/fast-access-but-secure/m-p/2540342#M234877</link>
      <description>&lt;P&gt;&lt;SPAN class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="ed265d95-a797-4a1b-b134-86ab1182be3a" id="21d4bb80-bc99-4f09-8852-272335d73764"&gt;Insted&lt;/SPAN&gt; &lt;SPAN class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="ed265d95-a797-4a1b-b134-86ab1182be3a" id="b153ce98-66db-4e8f-a6f8-900e91bdd4c4"&gt;for&lt;/SPAN&gt; ssh what other option? &lt;SPAN class="GINGER_SOFTWARE_mark" ginger_software_uiphraseguid="22c5f3ab-9f09-4d26-845e-ac211a20b6b8" id="df29327d-c3a2-44e8-b366-ff11891fa4b1"&gt;o&lt;/SPAN&gt; some type of VPN?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thanks&lt;/P&gt;</description>
      <pubDate>Wed, 03 Dec 2014 20:41:58 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/fast-access-but-secure/m-p/2540342#M234877</guid>
      <dc:creator>opnineopnine</dc:creator>
      <dc:date>2014-12-03T20:41:58Z</dc:date>
    </item>
    <item>
      <title>Well, you have to use either</title>
      <link>https://community.cisco.com/t5/network-security/fast-access-but-secure/m-p/2540343#M234879</link>
      <description>&lt;P&gt;Well, you have to use either SSH, ASDM, Telnet or a console cable (directly connected) to manage the ASA.&amp;nbsp; Telnet is not a secure protocol and is not permitted to connect to the ASA on an interface that has a security level of 0.&lt;/P&gt;&lt;P&gt;So your most secure method of administering the ASA is to connect to VPN and then connect to the ASA using one of the methods.&lt;/P&gt;&lt;P&gt;--&lt;/P&gt;&lt;P&gt;Please remember to select a correct answer and rate helpfull posts&lt;/P&gt;</description>
      <pubDate>Thu, 04 Dec 2014 07:44:18 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/fast-access-but-secure/m-p/2540343#M234879</guid>
      <dc:creator>Marius Gunnerud</dc:creator>
      <dc:date>2014-12-04T07:44:18Z</dc:date>
    </item>
  </channel>
</rss>

