I just bought an ASA 5505 that my data center is setting up for me. They have told me that setting the ASA to routed with NAT will break Web/DNS server on inside network.
For example: WAN IP 66.xxx.47.x translated to LAN IP 192.168.0.1 on inside network will not provide WAN IP to the inside Web/DNS server, which apparently will break DNS -- of course DC provides no other details.
Are most people providing web services behind an ASA set in Transparent mode?? Looks like transient mode has some drawbacks, not terminating VPN traffic being one of them.
Seems like routed/NAT is the most secure/versatile, but maybe I'm not seeing the benefits of transient mode, on the surface, seems like a quick & dirty way to get up & running, hopefully more than that.
Feedback appreciated, I have to make the call on this soon...