12-09-2014 08:25 AM - edited 02-21-2020 07:58 PM
Hello,
It looks like one of our customers need to buy ISR's to connect to the Azure cloud from Microsoft via DMVPN, since Cisco ASA doesn't support it (yet).
Will ASA support this in nearby future release?
Anybody has eventually suggestions? (Apart from not using Azure ;-)
Solved! Go to Solution.
12-09-2014 01:07 PM
Based on comments from Cisco representatives in the DMVPN/FlexVPN sessions at Cisco Live!, there's no plan to support DMVPN/FlexVPN on ASA. This may have changed since then, but I doubt it.
Infrastructure VPNs are slowly but surely moving away from the simple policy-based IPSec VPNs that the ASA supports to more modern and flexible route-based VPNs like DMVPN and FlexVPN. The key phrase here is "route-based", which puts the technology firmly into the purview of routers rather than security appliances.
The ASA units are very good at what they do, but modern infrastructure VPNs are just a bit beyond their scope.
12-09-2014 01:07 PM
Based on comments from Cisco representatives in the DMVPN/FlexVPN sessions at Cisco Live!, there's no plan to support DMVPN/FlexVPN on ASA. This may have changed since then, but I doubt it.
Infrastructure VPNs are slowly but surely moving away from the simple policy-based IPSec VPNs that the ASA supports to more modern and flexible route-based VPNs like DMVPN and FlexVPN. The key phrase here is "route-based", which puts the technology firmly into the purview of routers rather than security appliances.
The ASA units are very good at what they do, but modern infrastructure VPNs are just a bit beyond their scope.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide