I have an ASA with 3 interfaces, inside, outside and a DMZ running on 8.4(5). There are also VPN users conencting into the firewall.
Connected to the DMZ is an ACE with a private VIP that I can normally get to from Inside and so can the VPN users.
As soon as I assign a public address to the private VIP via the outside interface, the VPN users can't connect to the private VIP any more.
Through the inside interface it still works OK.
I have been looking for something like a NAT exemption for the VPN users, is there such a thing on 8.4(5) ?
