Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I understand how security levels work, but what about the VPN? Does VPN have a "security level"?The biggest reason why this is confusing me is because the NAT rules I'm using to permit access from the VPN to internal interfaces seem like they should ...
I would appreciate an explanation between these two terms.I am doing some remote work while I do some traveling. Normally, when I work from home my VPN connection uses the IPSecOverNatT Protocol when I view the current VPN connections through ASDM. I...
Here is my networkoutside (0)inside (100)dmz (90)wifi (80)dmz-network 192.168.100.0/24wifi-network 192.168.2.0/24inside-network 192.168.0.0/24I just implemented wifi within the last week. I did not configure this ASA originally.The original configura...
First let me say that I am very new to Cisco ASA administration. I've always used DD-WRT based Linksys routers for networking, so this stuff is very new to me.I have many questions concerning ASA. Mainly these questions revolve around NAT rules, ACL ...
Yea I've done that.I'm just wondering exactly why this ACL works in this case to permit a connection that was initiated by a VPN client. When it seems that this particular ACL command is actually for connections initiated from DMZ (or the inside).Tha...
NAT-T is enabled. There are other clients that are connected who are using the NAT-T protocol, but mine is IPSec. So my connection being reverted to the plain IPSec is being caused by the university campus connection I'm using?
Actually yea, I would like that. But at this point it doesn't really matter anyway. Because all my interfaces (except outside) are using a dynamic NAT/PAT. Which forces you to add other NAT rules for internal communication, otherwise all traffic gets...
Concerning "best practices". What is recommended? Enable or Disable? and what is the command for doing so?I still don't understand why traffic is allowed between VPN and DMZ, but I have to use a NAT:access-list inside_nat0_outbound extended permit ip...
Now I'm really confused...If I remove this line:access-list inside_nat0_outbound extended permit ip inside-network 255.255.255.0 vpn-network 255.255.255.0which also removes a Nat Exemption rule, I can no longer access the inside from the VPN... But f...