topic Re: vwire for cisco ASA terminating ipsec vpn in General Topics

vwire for cisco ASA terminating ipsec vpn

MP18 — Fri, 08 Mar 2019 18:07:41 GMT

We have cisco ASA where remote users ipsec connection terminate.

Need to confirm can we use the PA in vwire for this traffic?

Re: vwire for cisco ASA terminating ipsec vpn

OtakarKlier — Fri, 08 Mar 2019 18:59:19 GMT

I can confirm since I have done this in the past. We vwired it on the untrust side and then plugged it into the PAN on the trust side and created its own zone for it. That way all the ASA did was terminate the tunnels and the PAN did the rest of the inspections and allowances.

Re: vwire for cisco ASA terminating ipsec vpn

MP18 — Fri, 08 Mar 2019 20:02:08 GMT

Many thanks for confirmation.

Will do this soon on our end.

Good to know if works with VPN.

Re: vwire for cisco ASA terminating ipsec vpn

OtakarKlier — Fri, 08 Mar 2019 20:03:51 GMT

Hello,

Yeah the PAN does a better job of protection. I also created a policy to only allow VPN application traffic. If this is for site2site, I would say limit it to source/destination as well.

Cheers!