I replaced an archaic cisco router from 2003 with an ASA 5505. Currently, it only has one security level and one vlan. All ports are configured to use that inside interface with intra-interface. Basically just a switch. The reason behind this is long...

I have a vendor that I need to set up a site to site vpn with and they want me to use public IPs in the encryption domain. Can anyone explain why they would want to do this or if it offers any security benefits or weaknesses?

Need to block vpn connection attempts from a couple IPs. I tried the below access list but it didn't work. How can I drop the traffic before it tries to negotiate phase 1?access-list cp-outside remark vpn block 1 access-list cp-outside deny udp host ...