Hi, I'm trying to learn what possible controls and constraints ISE has over a 5508.  I found an upgrade constraint that ISE v1.3 is required for 5508 v8.x (intended upgrade target version) Even with login privileges, I haven't been able to determine what ISE is controlling on the 5508, if anything. All I have found is a comment about access lists, but they are not found on the ISE.  I'm not willing to upgrade the 5508 until i have some idea of what can break given the interdependence.  ISE experts out there, your inputs will be appreciated. Thanks. ... View more

Hi, I"m looking to confirm that NAT is not needed when crossing ASA interfaces; for example, when going from an inside interface (sec 100) to a dmz interface (sec 50) and back. Back when NAT was required to cross ASA interfaces, I know there were different setups like exemption and hiding, but I thought it was possible now to just let traffic go across the interfaces and all that is needed is ACLs.  Don't have a test unit at the moment and need to make some changes that will work the first time.  Thanks for your input. ... View more

Hi, I have been told one cannot do this...   NAT inbound from one public ip address to two separate internal email server addresses ss required for failover. This is specifically just for OWA/https and not SMTP.    Is there a NAT solution that would be applicable for this requirement?       ... View more