cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
442
Views
0
Helpful
2
Replies

Link Migration to New ISP and New ASAs.

All,

 

Thank you in advance for taking the time to read. Security is not my strength and I need to know if this is even possible.

 

I am migrating to a new ISP and New FWs, I setup the new link and firewalls parallel. I already have the new ISP and new FWs configured and I have internet access. I thought I could change the default route on the core switch to point to the new FWs  and therefore to the new ISPs, however, when do this my servers are not responding to outside requests. Inside clients like computers can get online but my web servers are down.

 

My plan was to use the new ISP for outbound and slowly migrate the servers to the new ISP block by changing the external DNS and NATTING through the new FWs. 

Is this scenario possible assuming the FWs are configured properly? 

Topology:

 

NEW ISP                                

(IP block 209.x.x.x) ===> New ASA ==

                                                              ==== core     ===== clients 

OLD ISP                                                ==== switch  =====and servers

(IP Block 63.x.x.x)====> OLD ASA ==

                                        NATs to

                                    Inside Servers

 

Thanks in advance.

 

FG