ASA 5520-AIP new configuration

[aleemuddin]

Hi,

I am configuring new ASA 5520 with AIP module for our network with HA (2 boxes), can anyone guide me what would be the best practice to configure in order to protect webservers and email server.

can pls give scopes in points to keep in mind before start (pre-plan)

thanks in adv.

[Allen P Chen]

To allow access to internal resources protected by the firewall, you will need to configure some type of NAT and also allow the traffic inbound via ACL.  Here are some configuration examples:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_tech_note09186a00804708b4.shtml

Hope this helps.

[Parminder Sian]

Hi,

To allow access to mail server on inside:-

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008067cf3b.shtml

To send network traffic to AIP-SSM:-

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00807335ca.shtml

For HA:-

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00807dac5f.shtml

Hope this helps.

Regards,

Parminder Sian