cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
648
Views
0
Helpful
1
Replies

Cisco Unified Mobility Advantage / Cisco ASA Deployment Question

dumlutimuralp
Level 1
Level 1

Hi all,

I was wondering, whether if we have to configure ASA' s outside interface with a real IP address according to the configuration guide below ?

http://www.cisco.com/en/US/docs/voice_ip_comm/cuma/7_0/english/install/guide/cuma_70_IAG_02_ASA.html

We were planning on positioning ASA behind a Juniper SSG20 firewall which has a static NAT configuration such as 81.8.x.y to 192.168.10.66 (which is ASA' s outside interface) ? Will this work as expected ?

Thanks in advance.

Dumlu

1 Reply 1

htluo
Level 9
Level 9

The main purpose of ASA is TLS proxy.  Technically speaking, you could put the ASA behind a NAT device as long as it can establish TLS connection with endpoints (cell phones).

The down side is: since this is not an "example" scenario, you'll have to fine tune the ASA config, which adds more complexity to troubleshooting.

Michael

http://htluo.blogspot.com