topic Re: Howto let inside users access SSLVPN on outside in Network Security https://community.cisco.com/t5/network-security/howto-let-inside-users-access-sslvpn-on-outside/m-p/1558935#M602318 <HTML><HEAD></HEAD><BODY><P>Unfortunately you can't connect to the outside ip address for SSL VPN connection from the inside network. If you are connected to your inside network, you would need to enable SSL VPN on the inside interface, and connect to the ASA inside interface.</P></BODY></HTML> Wed, 29 Sep 2010 14:28:29 GMT Jennifer Halim 2010-09-29T14:28:29Z Howto let inside users access SSLVPN on outside https://community.cisco.com/t5/network-security/howto-let-inside-users-access-sslvpn-on-outside/m-p/1558934#M602317 <P>We use a ASA5505 for as a firewall appliance and for users to connect to SSLVPN via the webvpn client. We can connect fine from home but we would also like to be able to connect from inside the firewall to be able to install the client onto new notebooks. What is needed to allow this? When ever we try no connection is established and the log shows first: 192.168.170.11&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;23088&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;x.x.104.84&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;443&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Built inbound TCP connection 8729087 for inside:192.168.170.11/23088 (192.168.170.11/23088) to identity:x.x.104.84/443 (x.x.104.84/443)<BR />and then<BR />192.168.170.11&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;23088&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;x.x.104.84&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;443&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;Teardown TCP connection 8729087 for inside:192.168.170.11/23088 to identity:x.x.104.84/443 duration 0:00:00 bytes 0 TCP Reset by appliance<BR />Does anybody know what will allow us to access the SSL portal page from inside? We don't want to enable SSLVPN on the inside interface because this will require us to configure split DNS and we dont use that. Thanks in advance.</P> Mon, 11 Mar 2019 18:47:09 GMT https://community.cisco.com/t5/network-security/howto-let-inside-users-access-sslvpn-on-outside/m-p/1558934#M602317 infarm2010 2019-03-11T18:47:09Z Re: Howto let inside users access SSLVPN on outside https://community.cisco.com/t5/network-security/howto-let-inside-users-access-sslvpn-on-outside/m-p/1558935#M602318 <HTML><HEAD></HEAD><BODY><P>Unfortunately you can't connect to the outside ip address for SSL VPN connection from the inside network. If you are connected to your inside network, you would need to enable SSL VPN on the inside interface, and connect to the ASA inside interface.</P></BODY></HTML> Wed, 29 Sep 2010 14:28:29 GMT https://community.cisco.com/t5/network-security/howto-let-inside-users-access-sslvpn-on-outside/m-p/1558935#M602318 Jennifer Halim 2010-09-29T14:28:29Z Re: Howto let inside users access SSLVPN on outside https://community.cisco.com/t5/network-security/howto-let-inside-users-access-sslvpn-on-outside/m-p/1558936#M602319 <HTML><HEAD></HEAD><BODY><P>Thanks for the reply. I do find that a bit strange since I had this working for a few month and then it just stopped. I would like to hear if anyone else can verify that the ASA doesn't allow this. Also does that mean you also have to configure split dns to reach the stuff in your DMZ (homepage, webmail and so forth) Thanks in advance.</P></BODY></HTML> Thu, 30 Sep 2010 06:11:08 GMT https://community.cisco.com/t5/network-security/howto-let-inside-users-access-sslvpn-on-outside/m-p/1558936#M602319 infarm2010 2010-09-30T06:11:08Z Re: Howto let inside users access SSLVPN on outside https://community.cisco.com/t5/network-security/howto-let-inside-users-access-sslvpn-on-outside/m-p/1558937#M602320 <HTML><HEAD></HEAD><BODY><P>Yes, you are correct. You would need to configure split dns as well.</P></BODY></HTML> Thu, 30 Sep 2010 07:49:13 GMT https://community.cisco.com/t5/network-security/howto-let-inside-users-access-sslvpn-on-outside/m-p/1558937#M602320 Jennifer Halim 2010-09-30T07:49:13Z