topic Manage ASA from remote in Network Security

Manage ASA from remote

battanc — Fri, 21 Feb 2020 13:05:44 GMT

I have been asked to manage a set of ASA that I reach "via Internet" through their public IP.

I am behind a dynamic NAT, so the ASAs does not see me directly.

How can I transfer files from my PC to the ASAs for updates?

TFTP does not work, because the ASA don't see the PC directly.

And the ASAs don't have the ASDM installed ...

Best regards

Claudio

Manage ASA from remote

David Nehoda — Tue, 28 Jan 2014 12:35:53 GMT

Version of code? I guess either way you could twice nat...but going out you should be fine, you would an external ip natd to your inside host, but you do not want to tftp over the internet....scp or sftp.

Manage ASA from remote

battanc — Tue, 28 Jan 2014 12:57:58 GMT

Several versions, from 7.0.8 to 8.4.2, someone already with ASDM (and here is it easy to upgrade).

I know that the best solution is to NAT / PAT my PC, but I can not make any changes to the firewall where I am connected.

Can I do SCP or SFTP to the ASA, to directly send the file ?

If YES, what should I config on the ASA to accept this connections ?

Thank's,

Claudio

Manage ASA from remote

David Nehoda — Tue, 28 Jan 2014 14:28:42 GMT

If you cannot make a config change on the ASA you are behind then you are stuck.

you either a need a one-to-one NAT inside-outside for your machine only on port 22, your inside ACl and your outside would need to allow that traffic.

Cant get you much furhter sorry.