Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
We have a need for an inside address to have more than one static NAT outside addresses. I know this wasn't possible before 8.3.X code. I still can't quite get it to work with 8.4.X code yet.Here is what I had with 8.2 code.static (inside,outside) ...
We have a 5585 failover pair we are installing that will have access to two ISP links. Each link will have a set of static outside IPs routed to it from the Internet. I will have traffic coming in from both ISPs at the same time and I need to un-na...
I will be installing a 10Gb Ethernet direct Internet access circuit, of which we will be using between 1-3 Gbps on average. We will have a set of static public IPs routed to the WAN IP address. The application we will be supporting is a HTTP based ...
I have an application I have to support where there will be two custom HTTP headers inserted into the normal HTTP 1.1 message. Let's call them "X-Header1" and "X-Header2."I want to be able to allow only HTTP traffic that has these two headers (and t...
I will be setting up two remote offices to connect to our main office. I will be configuring each branch office router to run a site-to-site VPN to the main office. I want to have individual users authenticate themselves with our ACS server at the m...
Mike,I have had another requirement levied on me I now need to create another rule to allow a HTTP request with a different set of headers. Originally I had the rule such that both of these headers had to be present:"X Header A 1""X Header A 2"now...
I have a situation like this one. I get the routing part, but if I want to use the firewall as a VPN head end, how do I make it such that the firewall outside interface can be in the range of new ISP IPs? how can I make the outside interface access...
Thanks Jon and Varun,I had thought about the source NAT way as well. The only problem I think with this approach would be that alll of the internal servers' log files will not show the proper Internet source IP for connections, but the ASA interface...
John,can you post the recent thread? I did some searching but didn't see relevant discussions.I worked out a way to do it, but it would require me to do double NAT (NAT the source IPs as well), but then it gets more complicated than it might be wort...
