For very brief access to another device behind the ASA, you could always NAT tcp/22 connections hitting a specific ASA interface to the target device's IP Address. This would allow you the ability to SSH through the ASA for a specific purpose. Otherwise, Piotr is correct in that your ASA should not provide attack vectors for the sake of administrator convenience - and that is why your ASA cannot source telnet/ssh sessions.
On Tue, Feb 19, 2013 at 5:30 PM, Piotr Matusiak <[email protected]> wrote: > This is NOT missing feature. There is no TELNET/SSH client for purpose. > I wouldn't like my ASA become a hop point to the rest of my network if > someones breaks in. > > Regards, > Piotr > > > > On 2/19/13 10:45 PM, Jimmy Larsson wrote: > > That has annoyed me since forever as well... > > http://nat0.net/another-missing-asa-feature-telnet-and-ssh-client/ > > Best regards > Jimmy > > > 2013/2/19 cisco 2006 <[email protected]> > >> >> >> ----- Forwarded Message ----- >> *From:* cisco 2006 <[email protected]> >> *To:* "[email protected]" < >> [email protected]> >> *Sent:* Tuesday, 19 February 2013, 20:32 >> *Subject:* Fw: SSH session >> >> >> >> Dear Sir, >> >> I'm preparing for CCIE Security using IPexpert materials , and I have a >> question about ssh session .The question is that : >> Can I opening ssh from cisco asa to another like a switch ? >> >> Best Regards, >> Israa >> >> >> >> >> >> _______________________________________________ >> For more information regarding industry leading CCIE Lab training, please >> visit www.ipexpert.com >> >> Are you a CCNP or CCIE and looking for a job? Check out >> www.PlatinumPlacement.com >> > > > > -- > ------- > Jimmy Larsson > http://nat0.net > ------- > > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > Are you a CCNP or CCIE and looking for a job? Check out > www.PlatinumPlacement.com > > > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > Are you a CCNP or CCIE and looking for a job? Check out > www.PlatinumPlacement.com >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
