ASA 5520 Update & Configuration

[hfth]

    I have an ASA 5520 at a remote location. It was set up and configured by a contractor. Up until a few days ago it was working fine. The AnyConnect quit working. I thought I would just reload the .svc file Then I couldn't use ASDM, so I went to the remote location and did a console connection and realized I was on incompatable versions of ASA, ASDM & anyconnect (thank you contractor). The ASA has an outside interface configured and an inside interface that the clients connect to. I updated the ASA from 7.0(6) to 8.2(2). The ASDM from 5 ? to 6.3(1) and the anyconnect to 2.3.01. I didn't export my config or firewall rules and now my clients can't get out my inside interface to the internet or ping anything. The ASA says the packets are being blocked from getting to the outside by a implict rule on the inside interface to block all outgoing ip traffic. Right above that rule on the same interface I have a rule to allow all outgoing ip traffic. I din't understand why it's being blocked when I have set up a rule as an execption. 

[Federico Coto Fajardo]

So, the LAN has internet access now correct?

Also, you can connect via AnyConnect but not RD into the machine... so...

What's the IP of this computer and can you PING it from the AnyConnect client?

Federico.

[Federico Coto Fajardo · Accepted solution]

Ok got it.

From the last config you post, this are the changes you need:

nat (inside) 1 192.168.200.0 255.255.255.0

access-list nonat permit ip 192.168.200.0 255.255.255.0 192.168.200.0 255.255.255.0

nat (inside) 0 access-list nonat

Those three commands should take care of the internet access and still allowing connectivity to the internal machines via AnyConnect.

However, the VPN pool is recommended to have it as a separate non-overlapping range.

Federico.

[hfth]

The exempt NAT rule allowed the RD, I'll have to seperate the ip ranges in the rules for the internal & VPN later. Thanks.

[Federico Coto Fajardo]

Glad I could help and thanks for the ratings 🙂

Federico.