Verifique este link para a configuração de IP e as práticas recomendadas: https://www.cisco.com/c/en/us/td/docs/security/asa/asa98/asdm78/general/asdm-78-general-config/intro-fw.html Para maior clareza, por favor, poste a consulta neste fórum: https://community.cisco.com/t5/network-security/bd-p/discussions-network-security ... View more

Oi, Você precisaria verificar o tráfego quando ele for descriptografado (tráfego de texto não criptografado). Qualquer conexão trataria o tráfego SQL / DB como está fazendo para outro tráfego. Você também precisa garantir que o dispositivo não fique sobrecarregado com o tráfego da VPN. Verifique as folhas de dados do ASA para obter mais informações sobre a taxa de transferência fornecida pelo ASA com serviços VPN. Infelizmente, não há método para limitar ou limitar o tráfego por sessão do Anyconnect no ASA. Você pode limitar todos os usuários de AnyConnect ou usuários VPN de acesso remoto coletivamente a uma determinada largura de banda. Abaixo está a configuração de amostra: access-list 101 extended permit ip internal_Resource_IP internal_Resource_Mask anyconnect_IP_Pool anyconnect_Mask class-map remote-access match access-list 101 policy-map outside-policy class remote-access police output 1000000 <- esse valor é de 1 Mb em bits https://www.cisco.com/c/en/us/td/docs/security/asa/asa98/configuration/firewall/asa-98-firewall-config/conns-qos.html#ID-2133-000002dd ... View more

IPコンフィグレーションとベストプラクティスについては下記リンクをご覧ください。   https://www.cisco.com/c/en/us/td/docs/security/asa/asa98/asdm78/general/asdm-78-general-config/intro-fw.html   詳細については、ご質問をこちらにご投稿ください。   https://community.cisco.com/t5/network-security/bd-p/discussions-network-security 注）この回答は      Aditya Ganjoo による英語での投稿の翻訳となっております。投稿はコミュニティ内のすべての言語に翻訳されます。 なお、日本語でのご質問は可能です。回答は英語になりますが 後ほど和訳を掲載致します。 ... View more

復号化された際（クリアテキストトラフィック）、トラフィックを確認する必要があります。 Anyconnectは、SQL / DBトラフィックを他のトラフィックと同じように処理するため、デバイスがVPNトラフィックで過負荷にならないようにします。 ASA with VPNサービスから提供される処理能力の詳細は、ASAデータシートで確認してください。 申し訳ございませんが、ASAでAnyconnectセッションごとにトラフィックを調整したりレート制限する方法はありません。 AnyConnectユーザーまたはリモートアクセスVPNユーザーを集合的に特定の帯域幅に制限することはできます。設定例は下記になります。 access-list 101 extended permit ip internal_Resource_IP internal_Resource_Mask anyconnect_IP_Pool anyconnect_Mask class-map remote-access match access-list 101 policy-map outside-policy class remote-access police output 1000000 <-- this value is 1 Mb in bits https://www.cisco.com/c/en/us/td/docs/security/asa/asa98/configuration/firewall/asa-98-firewall-config/conns-qos.html#ID-2133-000002dd 注）この回答は      Aditya Ganjoo による英語での投稿の翻訳となっております。投稿はコミュニティ内のすべての言語に翻訳されます。 なお、日本語でのご質問は可能です。回答は英語になりますが 後ほど和訳を掲載致します。 ... View more

Hi, You would need to check the traffic when it gets decrypted (clear text traffic). Anyconnect would treat the SQL/DB traffic as it is doing for other traffic. You also need to ensure that the device is not overwhelmed with the VPN traffic. Please check the ASA datasheets for more info on the throughput provided by ASA with VPN services. Unfortunately, there is no method to throttle or rate-limit traffic per Anyconnect session on the ASA. You can limit all AnyConnect users or remote access VPN users collectively to a certain bandwidth. Below is the sample configuration: access-list 101 extended permit ip internal_Resource_IP internal_Resource_Mask anyconnect_IP_Pool anyconnect_Mask class-map remote-access match access-list 101 policy-map outside-policy class remote-access police output 1000000 <-- this value is 1 Mb in bits https://www.cisco.com/c/en/us/td/docs/security/asa/asa98/configuration/firewall/asa-98-firewall-config/conns-qos.html#ID-2133-000002dd ... View more

Please check this link for the IP config and best practices:   https://www.cisco.com/c/en/us/td/docs/security/asa/asa98/asdm78/general/asdm-78-general-config/intro-fw.html   For more clarity, please post the query on this forum:   https://community.cisco.com/t5/network-security/bd-p/discussions-network-security ... View more

Por favor, inclua esta pergunta no forúm de Colaboração: https://community.cisco.com/t5/collaboration-voice-and-video/ct-p/4691-collaboration-voice-video ... View more

Fico feliz em ajudá-lo. ... View more

ご質問をコラボレーションにご投稿いただけますか。 https://community.cisco.com/t5/collaboration-voice-and-video/ct-p/4691-collaboration-voice-video 注）この回答は    Aditya Ganjoo による英語での投稿の翻訳となっております。投稿はコミュニティ内のすべての言語に翻訳されます。 なお、日本語でのご質問は可能です。回答は英語になりますが 後ほど和訳を掲載致します。   ... View more

Please post this query on the Collab forum: https://community.cisco.com/t5/collaboration-voice-and-video/ct-p/4691-collaboration-voice-video ... View more

お役に立てて何よりです。   注）この回答は    Aditya Ganjoo による英語での投稿の翻訳となっております。投稿はコミュニティ内のすべての言語に翻訳されます。 なお、日本語でのご質問は可能です。回答は英語になりますが 後ほど和訳を掲載致します。 ... View more