topic Re: VPN from DMZ interface to Outside interface in Network Security https://community.cisco.com/t5/network-security/vpn-from-dmz-interface-to-outside-interface/m-p/1642173#M559361 <HTML><HEAD></HEAD><BODY><P>One other related question. How could I allow traffic from this new wireless DMZ to access resources that are already being served to the Internet such as a web server. Is there a way to allow this hairpin traffic to exit the ASA and come back in? Thanks. </P><P></P><P>Sent from Cisco Technical Support iPhone App</P></BODY></HTML> Thu, 24 Mar 2011 02:39:53 GMT craig-mitchell 2011-03-24T02:39:53Z VPN from DMZ interface to Outside interface https://community.cisco.com/t5/network-security/vpn-from-dmz-interface-to-outside-interface/m-p/1642169#M559354 <P>Have an ASA 5510. Setting up a new DMZ zone for wireless and it will only have Internet access. Can someone explain the steps to me so that users on this new DMZ subnet can VPN into the Outside interface on the same ASA? Thank you!</P><P></P><P>Sent from Cisco Technical Support iPhone App</P> Mon, 11 Mar 2019 20:10:22 GMT https://community.cisco.com/t5/network-security/vpn-from-dmz-interface-to-outside-interface/m-p/1642169#M559354 craig-mitchell 2019-03-11T20:10:22Z Re: VPN from DMZ interface to Outside interface https://community.cisco.com/t5/network-security/vpn-from-dmz-interface-to-outside-interface/m-p/1642170#M559356 <HTML><HEAD></HEAD><BODY><P>You can't VPN to the outside interface. The ASA doesn't allow that if you are on the inside or DMZ, you have to be somewhere on the outside to allow VPN to the outside. You could enable the configuration to allow VPN session to the DMZ interface instead.</P><P></P><P>I hope this helps.</P></BODY></HTML> Mon, 21 Mar 2011 23:04:36 GMT https://community.cisco.com/t5/network-security/vpn-from-dmz-interface-to-outside-interface/m-p/1642170#M559356 PAUL GILBERT ARIAS 2011-03-21T23:04:36Z Re: VPN from DMZ interface to Outside interface https://community.cisco.com/t5/network-security/vpn-from-dmz-interface-to-outside-interface/m-p/1642171#M559357 <HTML><HEAD></HEAD><BODY><P>Okay, so I could just apply the same crypto map that is on my outside interface to this new DMZ interface and then just issue a new pcf file for the clients to use when they are on the DMZ wireless network?</P><P></P><P>Sent from Cisco Technical Support iPhone App</P></BODY></HTML> Tue, 22 Mar 2011 13:35:57 GMT https://community.cisco.com/t5/network-security/vpn-from-dmz-interface-to-outside-interface/m-p/1642171#M559357 craig-mitchell 2011-03-22T13:35:57Z Re: VPN from DMZ interface to Outside interface https://community.cisco.com/t5/network-security/vpn-from-dmz-interface-to-outside-interface/m-p/1642172#M559359 <HTML><HEAD></HEAD><BODY><P>That is correct</P><P></P><P>Sent from Cisco Technical Support iPhone App</P></BODY></HTML> Tue, 22 Mar 2011 13:49:39 GMT https://community.cisco.com/t5/network-security/vpn-from-dmz-interface-to-outside-interface/m-p/1642172#M559359 PAUL GILBERT ARIAS 2011-03-22T13:49:39Z Re: VPN from DMZ interface to Outside interface https://community.cisco.com/t5/network-security/vpn-from-dmz-interface-to-outside-interface/m-p/1642173#M559361 <HTML><HEAD></HEAD><BODY><P>One other related question. How could I allow traffic from this new wireless DMZ to access resources that are already being served to the Internet such as a web server. Is there a way to allow this hairpin traffic to exit the ASA and come back in? Thanks. </P><P></P><P>Sent from Cisco Technical Support iPhone App</P></BODY></HTML> Thu, 24 Mar 2011 02:39:53 GMT https://community.cisco.com/t5/network-security/vpn-from-dmz-interface-to-outside-interface/m-p/1642173#M559361 craig-mitchell 2011-03-24T02:39:53Z