my comany has a cisco firepower 1120. On this device is configured the RA VPN on outside interface with the cisco anyconnect. I want that i configure the site to site VPN on outside interface.whether both services can be configured on the outside interface and run simultaneously and both run at the same time?
@gogi99 on FTD Site-to-Site VPN is included in the base/essentials license (so nothing to purchase), you need the export controlled features (strong encryption) - if not already enabled.
@gogi99 yes you can run Remote Access and Site to Site VPN on the Firepower 1120 at the sametime no problem, regardless whether you are using the FTD or ASA software image on the hardware.
Bear in mind you will need the appropriate licensing in order to run the RAVPN.
@gogi99 on FTD Site-to-Site VPN is included in the base/essentials license (so nothing to purchase), you need the export controlled features (strong encryption) - if not already enabled.
Sorry, one more question. my company also has the DMZ zone (mail server, web server...) on the firepower 1120. can we use the RA VPN, the site to site VPN and DMZ zone in the same time on the firepower 1120?
i have created rules to permit the traffic to the DMZ from internet and DMZ to local LAN. whether it is necessary to create rules related to the site to site VPN and DMZ zone?
@gogi99 if you need access to the DMZ from over the Site-to-Site VPN. If so then, then amend the VPN configuration to include the DMZ networks in the VPN, create NAT exemption rules and configure access rules from S2SVPN networks to the DMZ servers.
