Hello, i need some help pls. I config asa to access web site(through public ip) that is published to dmz subnet from inside. Example: inside user host -  10.205.10.100 ASA interfaces inside - 10.205.10.1 dmz host - 192.168.200.20  outside published host address - 1.1.1.20 outside pat interface - 1.1.1.1 From inside host  10.205.10.100  i open 1.1.1.20  and connection timout. Dec 20 2012 20:31:59: %ASA-6-305011: Built dynamic TCP translation from inside:10.205.10.100/14468 to outside:1.1.1.1/48234 Dec 20 2012 20:31:59: %ASA-6-302013: Built outbound TCP connection 92 for outside:1.1.1.20/23 (1.1.1.20/80) to dmz:192.168.200.20/14468 (1.1.1.1/48234) Is it possible? or i need perfrom this through DNS to access private address of the published host. ... View more

Hello, is there any method to control an access to the different WLAN(PEAP) on the same ACS 5.2 and WLC? That is, there is two AD groups the one have access to domain network only the other group have access to internet only and may be third group that have access to both networks. Currently if i add new authorization policy the user will have access to both networks... Many thanks, in advance. ... View more

Hello, could you recommend me how i can accomplish the following task, I need to configure ACS 5.2 to authenticate WIFI users. There is two types of users: domain users and not domain users.  i want to authenticate the domain users with PEAP-MSCHAPv2. And not domain users i want to authenticate by host lookup(MAC). The question is how correctly organize access policy? Do I need several access services or one access service will be enough. Thanks in advance. ... View more