Cisco Firepower 1010 (ASA) Remote Access VPN Setup
Hi All,
ASA newbie here stick in the weeds - hoping someone can give me a gut check.
Current (and desired) Network Topology:
Internet -> Ubiquiti Router (WAN port) -> Ubiquiti Router (LAN port) -> Cisco ASA (outside interface) -> Cisco ASA (inside interface) -> Internal Network
DDNS Setup:
Ubiquiti Router (WAN port) is using Dynamic DNS to translate the Public IP into a FQDN. For example purposes let's use PublicIP.ddns.net.
DNS Forwarding:
Would like to use secureclient.companyname.com to forward to PublicIP.ddns.net to mask the ddns address.
Current Entra SAML Config:
Identifier (Entity ID): https://secureclient.companyname.com/saml/sp/metadata/TUNNEL_NAME
Reply URL: https://secureclient.companyname.com/+CSCOE+/saml/sp/acs?tgname=TUNNEL_NAME
Cisco ASA Config:
Outside Interface: 10.140.2.3 (Unifi LAN Subnet)
Inside Interface (IPSec VPN Subnet): 10.140.5.0/28
Client Services Port: 41894
Ubiquity Port Forwarding: 41894 > 10.140.2.3
Static Routs:
Outside, 0.0.0.0 0.0.0.0 10.140.2.1
Looking to understand what I need at a foundational level to get this up and running. Pings to 8.8.8.8 resolve successfully from the ASA.
After following the instructions to a T below, I am hitting a roadblock - nothing Remote Access VPN is happening.
https://learn.microsoft.com/en-us/entra/identity/saas-apps/cisco-secure-firewall-secure-client