ASA5510 traffic split on dual internet links

[amrishp2300]

Hi All,

I have ASA5510 running with Software Version 8.3(2). There are two internet links - ISP1 and ISP2.

I want to use ISP1 link for remote users to reach this ASA for Anyconnect SSL VPN access.

And ISP2 link should be used for inside users to go out for http/https internet access.

I think PBR is not possible on ASA. Can someone help if there is any alternate configuration option for above requirements.

Thanks,

AP

[Rishabh Seth]

PBR is supported on ASA 9.4.1 and above.I don't think the release is available for legacy ASA firewall.

I can think of using NAT to pull this off but I am not sure if it will perfectly work. 

You can try creating a static NAT rule from insideto ISP2 and match destination port as 80 and 443 for users.

Eg.

Nat(inside,isp2) source dynamic object-internal interface destination any any eq 80

Similarly for 443.

This is not a substitute for PBR so you can try it if it works otherwise you will need to upgrade to use PBR on newer code.

Share your findings.

Thanks,

R.Seth