Hi. I have some queries using the ASA 5506-x in transparent mode. I wish to use the ASA 5506-x within a specific subnet of our network, to isolate 3 devices, not the traditional firewalled, routed, internet access config in most examples I can find online.
The 3 devices will be in their own subnet, connect to a core L3 switch, with the SVI configured. Due to various reasons these 3 devices must be behind a firewall and rules in place to allow specific traffic to a server elsewhere in the network. Not required to use NAT. The ASA will be transparent mode.
I believe if I used routed mode the connection to the core switch will be the trusted 'inside'. The 3 devices will be the untrusted 'outside'. As I will be using transparent mode, does the concept of inside and outside interfaces exist with transparent mode? Please see diagram of required setup.
The 3 devices must be able to communicate with each other. I understand interfaces can be bridged to act as switch ports for this purpose.
The 3 devices must be able to communicate with the server - based on specific rules
The server must be able to communicate with each device
Is all this possible using transparent mode?
Do I need to put all interfaces in one bridge group (including the link to the core L3 switch)?
How would I then treat part of this bridge group as outside (containing the 3 devices) and part as inside (link to network) which then allows me to restrict traffic from the 3 devices into the network.
Traffic from server to the 3 devices should be ‘automatically’ allowed due to inside to outside traffic flow – is this possible in transparent mode, can interfaces in the same bridge group then still be named and have the security levels assigned, i.e. 100 for inside, 0 for outside.
Any assistance on configuration would be appreciated.
What is SecureX?
Cisco SecureX is included with all Secure Endpoint (formerly AMP for Endpoints) subscriptions. SecureX is a cloud-native platform that aggregates capabilities across your security environment. It’s designed to simplify your environment, ...
Cisco ISE Secure Wired Access Prescriptive Deployment Guide
Authors: Hariprasad Holla (until June 2018), Mahesh Nagireddy (until Dec 2018)
For an offline or printed copy of this document, simply choose ⋮ Options > Printer ...
Meet the Authors Slides- SecureX and the Evolution of Security Orchestration Automation and Response
(Live event – Wednesday, 20th, 2021 at 10:00 a.m. Pacific / 1:00 p.m. Eastern / 6:00 p.m. Paris)
This event had place on Wednesday 20th, January 202...
The following guide goes over the in and out of the Cisco Endpoints Security Analytics Dashboard as an overview and faq page
For more information on the product offering, licensing, support, and how to solution (TAC) guide links and more please visit the...
Join us live on Tuesday, January 19 at 10:00 am PT (and on demand after) as we discuss the latest version of ATT&CK and the expansion of TTPs in v8.
As a security expert, you are tasked with protecting your environment. You see the value of...