ASDM through firewall access

tahequivoice · ‎07-26-2007

Probably a strange request, but maybe not. I have two ASA 5520's, one behind the other as one is IPS the other CSC. I need to setup ASDM access through the IPS firewall to the second firewall for external management. I have SSH setup already sharing an external IP address with the CSC and AIP modules, but I cant access the https portion of the second firewall. Are there other ports besides 443 I need to open up for the external IP? To rule out ACL I have permit IP any to the IP.

pccw258103 · ‎07-29-2007

The first firewall, outside interface with lower security level to inside interface with higer security should static nat map to the second firewall's outside interface IP.

Otherwise, no-nat on first firewall allows traffic to pass from the outside to the inside without translating the source addresses.