topic ASA placement in Network Security

ASA placement

peter.williams — Tue, 12 Mar 2019 01:10:47 GMT

Is it recommended to place my ASA before the router? I want to terminate all of my VPN traffic on my router. So it would be Internet -> ASA -> router -> users

Thank you

Sent from Cisco Technical Support iPhone App

ASA placement

Julio Carvajal — Thu, 07 Mar 2013 04:13:02 GMT

Hello Peter,

Well, you can make it happen but my question would be:

Why wont you use the ASA to both terminate the VPN connections and protect your network?

Regards,

ASA placement

peter.williams — Thu, 07 Mar 2013 16:53:24 GMT

there is an requirement to terminate on the router (3845). Do I need to give the router public IP or private IP?

ASA placement

Julio Carvajal — Thu, 07 Mar 2013 19:21:58 GMT

Hello Peter,

Gotcha, public IP address as that is where the other say should point as the VPN peer,

Let me know if you have any questions

Check your private messages

Re: ASA placement

peter.williams — Sun, 10 Mar 2013 02:49:42 GMT

How can I allow the VPN traffic through the ASA and terminate on the router? Is this possible?

Internet -> ASA -> Router -> User

Sent from Cisco Technical Support iPhone App

Re: ASA placement

Julio Carvajal — Sun, 10 Mar 2013 04:22:15 GMT

Hello,

Yes, you can.

Just allow the right protocols and layer 4 ports,

If it's an IPSec tunnel:

UDP 500 (Isakmp)

ESP ( Protocol 50)

AH( Protocol 49)

Regards,

Julio Carvajal