ASA behind ASA/AIP configuration

Unanswered Question
Jul 11th, 2007
User Badges:

What would be the preferred method to configure an ASA AIP 5520 so that an additional ASA5520 with CSC behind it will work?


I am thinking the inside interface on the AIP ASA to be say 192.168.120.0/30, set up a static 1:1 to map 192.168.120.2, the second ASA to a public IP, and natting on the second ASA. The first ASA is IPS and DMZ, the second is pure internet access only.


Thoughts? Will IPS function as it should in this setup?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.

Actions

This Discussion