I've cleaned up the config see below....still no luck on getting out though...
hostname RWFW1
enable password LK7cutC9mBxkCKRd encrypted
passwd LK7cutC9mBxkCKRd encrypted
names
!
interface Vlan1
nameif inside
security-level 100
ip address 192.168.1.1 255.255.255.0
!
interface Vlan2
nameif outside
security-level 0
ip address x.x.x.x1 255.255.255.248
!
interface Vlan100
nameif RWLAN
security-level 100
ip address 10.1.1.1 255.255.254.0
!
interface Vlan110
nameif RWQA
security-level 100
ip address 10.1.16.1 255.255.255.0
!
interface Vlan120
nameif DMZ
security-level 80
ip address 192.168.251.241 255.255.255.240
!
interface Vlan130
nameif RWGST
security-level 50
ip address 172.17.10.1 255.255.255.0
!
interface Ethernet0/0
switchport access vlan 2
!
interface Ethernet0/1
!
interface Ethernet0/2
switchport access vlan 100
!
interface Ethernet0/3
switchport trunk allowed vlan 120
switchport mode trunk
!
interface Ethernet0/4
switchport access vlan 130
!
interface Ethernet0/5
switchport access vlan 110
!
interface Ethernet0/6
shutdown
!
interface Ethernet0/7
shutdown
!
ftp mode passive
clock timezone CST -6
clock summer-time CDT recurring
dns domain-lookup outside
dns domain-lookup DMZ
dns server-group DefaultDNS
name-server 4.2.2.1
same-security-traffic permit inter-interface
object-group network abc
network-object host 10.18.18.120
network-object 10.191.66.0 255.255.255.0
network-object 10.195.102.0 255.255.255.0
object-group service DM_INLINE_SERVICE_1
service-object esp
service-object ah
service-object udp eq 4500
service-object udp eq isakmp
access-list outside_cryptomap extended permit ip 192.168.251.240 255.255.255.240 object-group abc
access-list ipsecpassthruacl extended permit udp any any eq isakmp
access-list outside_access_in extended permit object-group DM_INLINE_SERVICE_1 any host x.x.x.x
pager lines 24
logging enable
logging asdm informational
logging class auth asdm informational
mtu inside 1500
mtu outside 1500
mtu RWLAN 1500
mtu RWQA 1500
mtu DMZ 1500
mtu RWGST 1500
no failover
icmp unreachable rate-limit 1 burst-size 1
icmp permit any RWQA
no asdm history enable
arp timeout 14400
nat-control
global (inside) 11 interface
global (outside) 1 interface
nat (inside) 1 0.0.0.0 255.255.255.0
nat (RWLAN) 1 0.0.0.0 0.0.0.0
nat (RWQA) 1 0.0.0.0 0.0.0.0
nat (RWGST) 1 0.0.0.0 0.0.0.0
static (RWQA,RWLAN) 10.1.16.0 10.1.16.0 netmask 255.255.255.0
static (DMZ,RWLAN) 192.168.251.240 192.168.251.240 netmask 255.255.255.240
static (RWLAN,outside) x.x.x.x 10.1.1.14 netmask 255.255.255.255
static (RWLAN,RWQA) 10.1.0.0 10.1.0.0 netmask 255.255.254.0
access-group outside_access_in in interface outside
route outside 0.0.0.0 0.0.0.0 x.x.x.x 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
dynamic-access-policy-record DfltAccessPolicy
http server enable
http 192.168.1.0 255.255.255.0 inside
http 10.1.0.0 255.255.254.0 RWLAN
snmp-server host RWLAN 10.1.1.17 community Rwerks
no snmp-server location
no snmp-server contact
snmp-server community *****
snmp-server enable traps snmp authentication linkup linkdown coldstart
no sysopt connection permit-vpn
crypto ipsec transform-set ESP-3DES-MD5 esp-3des esp-md5-hmac
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
crypto map outside_map0 1 match address outside_cryptomap
crypto map outside_map0 1 set peer 12.46.119.201
crypto map outside_map0 1 set transform-set ESP-3DES-MD5
crypto map outside_map0 interface outside
crypto isakmp enable outside
crypto isakmp policy 5
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
crypto isakmp policy 10
authentication pre-share
encryption des
hash sha
group 2
lifetime 86400
crypto isakmp policy 30
authentication pre-share
encryption 3des
hash sha
group 1
lifetime 86400
crypto isakmp policy 65535
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
no crypto isakmp nat-traversal
telnet 10.1.0.0 255.255.254.0 RWLAN
telnet timeout 5
ssh timeout 5
console timeout 0
dhcpd auto_config outside
!
dhcpd address 10.1.16.151-10.1.16.200 RWQA
dhcpd dns 10.1.1.10 interface RWQA
dhcpd option 3 ip 10.1.16.1 interface RWQA
dhcpd enable RWQA
!
threat-detection basic-threat
threat-detection statistics
threat-detection statistics tcp-intercept rate-interval 30 burst-rate 400 average-rate 200
webvpn
tunnel-group abc type ipsec-l2l
tunnel-group abc ipsec-attributes
pre-shared-key *
!
class-map inpsect_default
class-map ipsecpassthru-traffic
match access-list ipsecpassthruacl
class-map inspection_default
match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map type inspect ipsec-pass-thru iptmap
parameters
esp per-client-max 10 timeout 0:11:00
ah per-client-max 5 timeout 0:06:00
policy-map inspection_policy
class ipsecpassthru-traffic
inspect ipsec-pass-thru iptmap
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect netbios
inspect rsh
inspect rtsp
inspect skinny
inspect esmtp
inspect sqlnet
inspect sunrpc
inspect tftp
inspect sip
inspect xdmcp
inspect pptp
inspect ipsec-pass-thru
inspect icmp
class ipsecpassthru-traffic
inspect ipsec-pass-thru
!
service-policy global_policy global
service-policy inspection_policy interface outside
prompt hostname context
Crypto
