How Data Moves Through The Transparent Firewall - Cisco FirePOWER ASA 5500 series Configuration Manual

Chapter 15 Firewall Mode Overview
Table 15-1
Feature
QoS
VPN termination for through
traffic

How Data Moves Through the Transparent Firewall

Figure 15-8
public web server. The security appliance has an access list so that the inside users can access Internet
resources. Another access list lets the outside users access only the web server on the inside network.
Figure 15-8
OL-10088-01
Unsupported Features in Transparent Mode
Description
—
The transparent firewall supports site-to-site VPN tunnels for
management connections only. It does not terminate VPN connections
for traffic through the security appliance. You can pass VPN traffic
through the security appliance using an extended access list, but it
does not terminate non-management connections. WebVPN is also not
supported.
shows a typical transparent firewall implementation with an inside network that contains a
Typical Transparent Firewall Data Path
www.example.com
Internet
209.165.201.2
Management IP
209.165.201.6
209.165.200.230
Web Server
209.165.200.225
Host
209.165.201.3
Cisco Security Appliance Command Line Configuration Guide
Transparent Mode Overview
15-11