ASA Policy Based Routing
ASA Policy Based Routing This post describes how to configure a Cisco ASA firewall to support Policy Based Routing (PBR). PBR allows an administrator to define routing based on source…
ASA Application-Based Routing
ASA Application-Based Routing The Cisco Secure Firewall ASA supports application-based routing using Policy-based routing (PBR) and DNS snooping. DNS snooping identifies the domain name based on the IP address learnt…
ASA dual ISP backup VPN
This post covers the configuration of a policy-based Site-to-Site VPN on a single Cisco ASA Firewall (or HA failover pair) with dual internet connections on the head-end ASA. Topology The…
ASA VPN preempt
ASA VPN preempt The Cisco ASA supports multi-peer VPN, useful when an organisation requires a primary and backup VPN tunnel. When the ASA detects the VPN to the primary peer…
ASA IKEv2 Multi-Peer VPN
ASA IKEv2 Multi-Peer VPN Overview High Availability VPN can be achieved on a Cisco ASA firewall using multi-peer crypto map, previously this feature was only supported on the ASA using…
ASA Dynamic VTI
Cisco Secure Firewall ASA version 9.19 introduces the Dynamic Virtual Tunnel Interfaces (DVTI) route-based VPN, which is an alternative to a policy-based VPN (crypto map). VTI is always up, unlike…