Manage ASA from remote

[battanc]

I have been asked to manage a set of ASA that I reach "via Internet" through their public IP.

I am behind a dynamic NAT, so the ASAs does not see me directly.

How can I transfer files from my PC to the ASAs for updates?

TFTP does not work, because the ASA don't see the PC directly.

And the ASAs don't have the ASDM installed ...

Best regards

Claudio

[David Nehoda]

Version of code?  I guess either way you could twice nat...but going out you should be fine, you would an external ip natd to your inside host, but you do not want to tftp over the internet....scp or sftp.

[battanc]

Several versions, from 7.0.8 to 8.4.2, someone already with ASDM (and here is it easy to upgrade).

I know that the best solution is to NAT / PAT my PC, but I can not make any changes to the firewall where I am connected.

Can I do SCP or SFTP to the ASA, to directly send the file ?

If YES, what should I config on the ASA to accept this connections ?

Thank's,

Claudio

[David Nehoda]

If you cannot make a config change on the ASA you are behind then you are stuck. 

you either a need a one-to-one NAT inside-outside for your machine only on port 22, your inside ACl and your outside would need to allow that traffic.   

Cant get you much furhter sorry.