Hi Yuri,
If I understood you correctly, I think this configuration should work for what you need, assuming you don't have an access-list on inside of TA-FWL. If you do, adjust it to allow the connection. In summary, this configuration should allow h...
But generally speaking I would avoid NAT completely if possible? Can you just add a couple of persistent static routes to those hosts so that they know how to reach each other? This way you can avoid NAT completely and use regular routing for connect...
Yuri,
When configuring a static NAT in the form '(outside,inside) static interface' you're translating the source IP of your outside host to the IP address of the firewall inside interface. If you want to translate it again on the other firewall, y...
Assuming your subordinate CA is configured correctly, did you authenticate it on the router before enrolling? That means, do you have the entire chain of certs on your router, i.e. RootCA -> SubordianteCA?