Hot answers tagged cisco-asa
The risks you're taking should covered by the service level agreement you have with that major cloud server company. Are you getting "a managed firewall" with certain capabilities, where a model is an indication of those capabilities and depending on the SLA the service provider is responsible for the configuration, maintenance and life cycle management? ...
For unclear reasons, this problem no longer persists. It may be that it disappeared on Ubuntu upgrade.
Solve it with internal DNS. Create a new zone home.company.com create an emty a record (no name) and add ip of the internal web server you want to reach. Users from inside get internal dns with internal ip and external dns as before. This solution makes assumption that you have your own internal DNS server.
Turned out to be a bad interface on the 5505 vpn server. We recabled and things have been rock solid ever since.
We had the same issue but for a different protocol. While using IOS version 8.x (cannot remember the exact release), there was an issue with the Inspects that would mess up the order in wich it would relay the packets. Do you have HTTP/HTTPS inspects enabled? If so, you can create an ACL and "exclude" one or two machines from the inspects just for them ...
If you're trying to configure the ASA from the ESXi host (or a guest), how exactly do you propose to get into the ESXi host or guest? I'm assuming that the ASA is the gateway for the server. So if the ASA is down/not configured properly, you won't be getting into the server, either. The opener is in the box, sorry to say. If your actual goal is to ...
Only top voted, non community-wiki answers of a minimum length are eligible