Hi,

I have an issue I just can figure out, but hopefully a lot of smart people on this forum can :)

In a lab I build a Juniper SA SSL remote access on the inside network, and SSL VPN works to this device from within the inside network.

On the edge between the inside and the outside network I have an Cisco ASA with Anyconnect SSL VPN, and this one works from the outside.

But now I want to make the Juniper SA accesible from the outside network, so I figured NAT port translation can do this, because obviously TCP port 443 is used by the ASA SSL VPN.

So I created this ACL:

object network Juniper.SA
 host 10.10.10.224

access-list outside_access_in extended permit tcp any object Juniper.SA eq https log debugging

And this matching NAT rule:

object network Juniper.SA
 nat (inside,outside) static interface service tcp https 4443 

And this is the NAT table:

TCP PAT from inside:10.10.10.224 443-443 to outside:100.100.100.1 4443-4443

So now when I try to connect to the Juniper SA with a browser on the outside network (https://100.100.100.1:4443) at first I get a certificate warning from the self signed certificate in the Juniper SA, and when I click OK I get this weird message:

https://100.100.100.1/+CSCOE+/message.html?mc=2