OnPrem reachability issue from Azure-ASAv AnyConnect network

[SatishJ11]

Hi All,

Recently I have migrated physical ASA Firewall to ASAv on Azure, however I'm facing challenges to reach OnPrem network after connecting AnyConnect. 

As an temporary fix, below NAT has been added, so that all the AnyConnect traffic goes via Firewall Internal network, but the problem is when more users are connected to VPN I will not be able to ssh to Firewall to do any changes.

nat (Outside,Internal) source dynamic Anyconnect_Pool interface

ASA Version 9.19(1)22

Is anyone have some solution for this ?

[Aref Alsouqi · Accepted solution]

Those default routes seem to have different metrics, one with 50 and another with 2, so the one with 50 wouldn't be used until the one with 2 fails.

[SatishJ11]

Hi Aref, thanks for all your support. I have done some more changes and now I'm able access my onprem resources successfully

[Aref Alsouqi]

You are very welcome. Please mark the helpful answers if there were any ;-D