Active/Active ASA remote VPN access limitations.

Mahmoud Nossair — Mon, 11 Mar 2019 21:27:14 GMT

Hi Experts

We have an Active/Active ASA 5520 setup, as i know in Active/Active setup there is no remote VPN access, So i could overcome this limitations?

I have a solution but i dont know if it is ablecable or not? we have a spare ASA 5510, so i can use it behind Active/Active Firewalls and assign a public static NAT IP address to it and open all IPSEC and VPN ports and let the remote users to connect to it, is this ablecable setup or not? please advise.

Thanks in advance

Active/Active ASA remote VPN access limitations.

Marcin Latosiewicz — Tue, 20 Sep 2011 17:47:52 GMT

Mahmoud,

Yes, deployments like this do exist in the wild 😉

People put the VPN termination either in a DMZ module or outside.

The thing to remember that if a VPN device is behind NAT it will use UDP/4500 from MM5 or AM3, so no ESP/AH packets will/should be seen.

HTH,

Marcin

topic Active/Active ASA remote VPN access limitations. in Network Security

Active/Active ASA remote VPN access limitations.

Active/Active ASA remote VPN access limitations.