ISE | Inline VPN deployment Issue

[Khaled El-Metwaly]

Hi,

I have ASA which I use for internet access and VPN gateway. I am trying to deploy ISE inline VPN node, but i found that the users traffic (from inside to internet) denied by the Inline node (users return traffic from untrusted port to trusted is blocked).... It is only permitted if i add the real IP subnet , i need to access , in the filter tab.

This is not practical because i can not exclude all internet addresses.

My questions are:

1) Is Inline VPN designed to be used only with dedicated VPN GWs?

2)Is there any workaround for this?

Thanks for any support.

[khaled alodat]

Upgrade the ASA to the 9.1 or earlier, the inline VPN is not required in the new code

[Charlie Moreton]

The ASA code you need is 9.2.1 or later.  This allows the ASA to perform CoA, thus negating the need for the Inline Posture Node.

In which mode is the IPN working?  Bridged or Routed?

Please Rate Helpful posts and mark this question as answered if, in fact, this does answer your question.  Otherwise, feel free to post follow-up questions.

Charles Moreton