Webvpn Inside interface question

[andrewswanson]

Hello

We're in the process of planning a webvpn service on an ASA5550 to replace an existing IPSec service. We'd like to test this internally initially on our wireless network. The Inside interface is currently used for ASDM and I'm aware of the issues of enabling webvpn on the same interface.

I've attached a pdf showing 2 options we're having a look at.

Option 1 - enable webvpn on the Inside interface and change the port for either ASDM or Webvpn

Option 2 - create a new interface on the ASA and enable webvpn on it.

Does anyone have any suggestions as to which option is the best way forward or are there better ways to deploy webvpn internally.

Thanks

Andy

[hadbou]

If you have a free interface on the ASA it is better to use one interface for WEBVPN and another interface for ASDM.If there is no free interface on the ASA we have to use the first option which is to enable webvpn on the Inside interface and change the port for either ASDM or Webvpn.Depends on the availability of interface.