Review CISCO ASA SSM 20 configuration

@AhmedMFakkar

Hello Dear, I am a Cisco ASA expert and I have a Cisco CCNP certificate. I have great experience in various network technologies such as VLAN, STP, OSPF, EIGRP, BGP, MPLS, OpenVPN, IPsec, L2TP, PPTP, SSL, etc. Also, I have great hands-on experience in, - Cisco Routers ASR 9k&1k, ISR 4K, 2900, 2800, 878, 888, Switches Nexus 9K, Cat 6500, 3850, 2900 and ASA 5505, 5506x, 5508. - Juniper Routers (M7, M10, MX 480, MX 960) and SRX (300, 500). - Palo Alto 220, 550, 850 and 3200 and Fortigate 40F, 60F, 100E, 200E and 800E Firewalls. - Huawei routers NE-40, NE5000E and Switches Quidway S2700 and S5300. - HP Switches procurve 3500 and procurve 5900. - Mikrotik CCR1036, CCR1009, CCR1700, CCR2204 and RB2011. We can discuss it further, let me know if you are interested. Regards, Ahmed Fakkar

@rupa37

Having worked in the field for over 15 years, I am confident that I can provide you with unparalleled support for your project. My background in system administration and DevOps equips me with a wide range of skills specifically tailored to managing and optimizing IT infrastructures. Additionally, my extensive know-how with Linux systems makes me well-prepared to handle any distribution and enhance their security, stability, and performance. As an experienced professional, I understand the importance of meticulous documentation in facilitating future updates and ensuring straightforward maintenance. You can trust me to provide detailed records of every step taken during the completion of this project, guaranteeing seamless management post-completion. Moreover, my proficiency in Cisco networking solutions will allow me to skillfully navigate your ASA SSM devices to achieve the desired outcomes. Extending beyond network configuration, my knowledge also includes areas such as SSL/TLS certificates, firewall rules, and access control policies; guaranteeing reliable cybersecurity measures for your platforms. Overall, I am confident that my skills, experience and commitment make me an excellent candidate for assisting you with this project.

@tangramua

Dear ,   We carefully studied the description of your project and we can confirm that we understand your needs and are also interested in your project. Our team has the necessary resources to start your project as soon as possible and complete it in a very short time.   We are 25 years in this business and our technical specialists have strong experience in System Admin, DNS, IIS, Windows Server, Documentation, Network Security, Firewall, Network Monitoring and other technologies relevant to your project.   Please, review our profile https://www.freelancer.com/u/tangramua where you can find detailed information about our company, our portfolio, and the client's recent reviews.   Please contact us via Freelancer Chat to discuss your project in details.    Best regards, Sales department Tangram Canada Inc.     

@ExpertNetworkEng

Hello, I’m a Senior Network & Security Engineer with 10+ years of hands-on experience designing, implementing, and migrating enterprise and service-provider networks. I specialize in Network Security, SD-WAN, routing & switching, enterprise wireless, and secure network architecture, helping companies modernize legacy networks, improve reliability, and reduce WAN costs. Core expertise: - Firewalls & Security: FortiGate, Palo Alto, Cisco ASA / Firepower IPsec & SSL VPN, site-to-site, remote access, policy design - Routing & Switching: Cisco ASR/ISR, Catalyst, Nexus, Juniper Routers (M10, MX 960) and SRX 500 (BGP, OSPF, EIGRP, IS-IS, MPLS, VLANs, STP, HSRP/VRRP) Enterprise LAN & campus design - LAN Switching (Multi-Vendor): Cisco, Juniper, Meraki, HP, Aruba, FortiSwitch Access/core design, redundancy, QoS, segmentation - Enterprise Wireless: Cisco WLC & APs, Cisco Meraki Wi-Fi, Ubiquiti, Aruba Wi-Fi, FortiAP Coverage design, roaming, security, troubleshooting - SD-WAN: Fortinet SD-WAN, Cisco SD-WAN (Viptela), Cisco Meraki (hub-and-spoke, MPLS + Internet, segmentation, HA, traffic steering) - Cloud & Hybrid Networking: AWS / Azure / GCP Site-to-site VPN, routing integration - Network Automation: Python Certifications: CCIE Enterprise Cisco Certified Specialist – Enterprise SD-WAN Implementation CCNP Data Center CCNP Security Juniper JNCIA-Junos, JNCIA-Cloud If you share your current setup and goal, I can propose a clear and practical solution. Best regards,

@nolk

Hi there, Having official CCNP certification and 10+ years of Network Administration experience I'll be perfect fit for this task. I'll need remote access (ssh and/or web-gui) to your ASA devices to audit current config and suggest requried changes. I'm based in Sydney, so will be available in your timezone for chat and work. I can also visit sites where devices are located if required.

@SkillCrafts

I understand you need a thorough review of your Cisco ASA SSM configurations, particularly concerning secure access to your on-premise Exchange, File Servers, and SharePoint, as well as public-facing website accessibility. My experience includes optimizing firewall policies for complex internal resource access and ensuring robust public-facing service delivery, similar to how I've configured secure VPN tunnels and NAT policies for multi-site enterprise networks to grant granular access. My approach will involve a detailed audit of your current ASA SSM configurations, focusing on Access Control Lists (ACLs), Network Address Translation (NAT) rules, and security policies. I will analyze the existing firewall rulesets to identify any misconfigurations or security gaps that might be hindering File Server access and preventing proper routing of public IP addresses to your internal web servers. I'll then propose specific, actionable changes leveraging best practices for stateful firewall management, ensuring both security and optimal performance for your internal and external network traffic. To ensure I address your specific concerns precisely, could you clarify if the public-facing URLs for your websites are currently resolving correctly, and what specific symptoms or errors you're encountering with File Server access? I'm confident I can provide a comprehensive solution to enhance your network's security and functionality. Let's schedule a brief call to discuss your environment in more detail.

@Appworldz

This sounds less like a simple firewall tweak and more like a full infrastructure review and cleanup, which is honestly the right move before something breaks publicly. I’ve handled multi site Windows environments with Exchange, IIS, SharePoint, VPN/firewall rules, NAT, reverse proxy setup, SSL renewals, and server hardening before. I’d first audit the current ASA/SSM routing, DNS, IIS bindings, and inter site access rules to identify gaps around file server visibility and public exposure. Then I’d implement secure HTTPS publishing, tighten firewall/access policies, and document the whole environment properly for future maintenance. Rate: 40 AUD/hour Estimated effort: roughly 20 to 35 hours depending on current configuration quality.

@emilesd617

Hi, I am a full-stack AI developer with 8 years of rich experience in software development with a background in network infrastructure, Windows Server administration and enterprise security. I am familiar with Cisco ASA, Windows Server, IIS, DNS, SSL/TLS certificates, firewall configuration, NAT, reverse proxies, Exchange Server, SharePoint, file server access control, network security, and infrastructure documentation. I can review and harden your dual-site ASA environment, validate inter-site access to Exchange, File Servers, and SharePoint, configure and verify public website access through dedicated IPs, renew and bind SSL certificates, review firewall and access policies, and provide clear documentation of all networking, security, and server changes for future maintenance. I'm an individual freelancer and can work on any time zone you want. Please contact me with the best time for you to have a quick chat. Looking forward to discussing more details. Thanks. Emile.

@Foraxis

⭐ I handled a similar project ⭐, Happy to show you what works before you commit. A customized networking and server setup was implemented to enable access to File Servers, Exchanges, and Sharepoint across two sites with ASA SSM devices. The project aligns perfectly with the requirements for secure access control, SSL/TLS certificates renewal, and configuring robust firewall rules. Understanding the project's complexity, the focus is on enhancing performance, ensuring top-notch security, and delivering a seamless user experience. Specializing in delivering high-performance solutions, strong security measures, and a polished user experience, we guarantee a successful project outcome. Worst case, you walk away with a free consultation and a clearer understanding of your project. Kind regards, Curtley

@cybexsoftadmin

Hi, I have 15+ years of experience in network infrastructure, Cisco ASA/SSM firewalls, Windows Server environments, Exchange, IIS, SharePoint, and secure site-to-site connectivity. I can help with: • Review and optimize ASA firewall configuration • File Server, Exchange, and SharePoint access between both sites • Public IP routing, NAT, and reverse proxy configuration • SSL/TLS certificate renewal and IIS binding • DNS configuration and website publishing • Firewall rules, access policies, and security hardening My approach is to validate both internal and external connectivity, ensure secure access to shared resources, and verify all websites are reachable over HTTPS without impacting existing operations. Available to start immediately.

@ravikumarsingh1

I can help review, secure, and complete the entire networking and server configuration across both sites, ensuring reliable access to Exchange, File Servers, SharePoint, and public-facing websites. I can help with: • Cisco ASA/ASDM firewall review and optimization • Site-to-site connectivity validation between both locations • File Server, Exchange, and SharePoint access troubleshooting • NAT and port-forwarding configuration • Public IP to IIS/web server mapping • SSL/TLS certificate renewal and installation • IIS bindings and HTTPS enforcement • DNS validation and updates • Access-control policy review and hardening • Firewall rule cleanup and security improvements I also have experience with: • Cisco ASA firewalls • Windows Server administration • Microsoft Exchange (on-premises) • IIS hosting and SSL deployment • Active Directory environments • VPNs, routing, NAT, and network troubleshooting My approach focuses on: • Maintaining existing business services during changes • Securing external access without breaking internal workflows • Proper segmentation and firewall policy design • Clear documentation for future maintenance Deliverables: • Fully working HTTPS websites on dedicated public IPs • Verified Exchange, File Server, and SharePoint connectivity between sites • Updated SSL certificates and IIS bindings • Firewall and access-control review • Documentation of NAT, DNS, firewall rules, and server configuration changes

@billybryan98

Hello there, I’ve built and secured complex Cisco ASA setups across two sites, aligning edge devices with internal networks to ensure seamless access to File Servers, Exchange, and SharePoint while preserving existing internal traffic patterns. I’ll translate your public addresses into precise NAT/Routing rules, implement robust access controls, and harden the environment end-to-end from firewall to IIS bindings. I’ve previously designed SSL/TLS certificate renewal workflows, updated DNS records, configured NAT or reverse proxies when needed, and ensured external sites reach you over HTTPS without impacting internal services. I’ll document every step clearly so future updates are straightforward and repeatable. I can handle the full project based on my hands-on network security, Windows Server, DNS, IIS, and documentation experience, delivering a clean, compliant, and verifiable setup from day one. Please feel free to contact me so we can discuss more details. Best regards, Billy Bryan

@abdulhamidh2

Hello I understand you need a complete networking and server setup for two sites with ASA SSM devices, ensuring secure access to your on-prem Exchange, File Servers, and SharePoint, plus public-facing websites each with dedicated IPs. I’ll handle everything from routing public IPs through to internal servers, configuring NAT/reverse proxies as needed, renewing SSL/TLS certificates, setting firewall rules, access controls, updating DNS, binding certificates in IIS, and thorough testing for HTTPS access both externally and internally. With over 10 years managing Windows Server environments, IIS configuration, firewall security including ASA devices, and strong documentation skills, I’ll ensure a hardened setup that’s well-documented for easy future maintenance. Can you share your current ASA configuration and any existing network diagrams to get started? Best regards, AbdulHamid

@nintysix96

Rough ballpark on the price and timeline above, we'll firm those up once we've had a look at your current configs and talked through the full scope. Two sites, both running Cisco ASA SSMs, with on-prem Exchange, file servers, websites and a dormant SharePoint intranet that needs to come back to life. The core problem is that cross-site file server access isn't working the way it should, and on top of that you need clean public-facing HTTPS for each website, with internal traffic left untouched. That's a networking, firewall and IIS job rolled into one, and the SSL renewals are time-sensitive. Here's how we'd approach this: - ASA config audit: Pull the running configs from both ASAs and map out what's actually in place vs what should be, spotting any gaps in the site-to-site VPN or access control policies causing the file server issues. - Routing and NAT: Configure static NAT or PAT on each ASA to route the dedicated public IPs cleanly through to the correct internal web servers, with no leakage between sites. - Firewall rules and ACLs: Tighten inbound and outbound rules, lock down access to Exchange, file shares and SharePoint to the right subnets, and block anything that shouldn't be reaching those services from outside. - SSL/TLS and IIS: Renew the certificates, bind them correctly in IIS on each server, test HTTPS end-to-end from external and confirm internal HTTP/S still resolves as expected. - DNS and documentation: Update any DNS records needed for public access, then write up every change, every rule, and every config step in plain language so your team can maintain it without guesswork. After a short scope chat we'll put together a written proposal covering deliverables, timeline and a firm price. Want to jump on a quick call this week to walk through the current setup? Best, 96 Studio

@jayantm76

Hi. I’ve handled similar multi site Windows environments. I've experience with Cisco ASA firewall rules, NAT, ACLs, DNS, IIS certificate bindings, and Windows Server access. Can you share the current status? so I can review the routing before moving next stage.

@agustingonzalog

Hello, I can help you review and reconfigure your CISCO ASA SSM 20 setup. Approach: • Full audit of your current firewall rules and access policies • Configure NAT or reverse proxies as needed • Update DNS, bind SSL/TLS certificates in IIS, and verify HTTPS access • Ensure internal traffic to File Servers, Exchange, and SharePoint remains unaffected Technologies: • CISCO ASA, Windows Server, IIS, DNS, SSL/TLS Extras: • Hardening of the environment • Step-by-step documentation for future updates Timeline: • 3–5 days Goal: To deliver a secure, fully functional network with public-facing websites and reliable internal access—hassle-free. Ready to get started. Agustin

@JoubertC

I recently assisted a client in achieving similar goals with their network and server setup. We will help you establish a secure and seamless network infrastructure for your two sites with ASA SSM devices, ensuring access to File Servers, Exchange, and SharePoint. Understanding the importance of clean, professional configurations, we specialize in SSL/TLS certificates, firewall rules, and access control policies to enhance your network security. Our expertise includes configuring NAT, updating DNS settings, binding certificates in IIS, and ensuring uninterrupted HTTPS access for external visitors while maintaining internal operations. With a focus on detail and documentation, we guarantee a straightforward update process for future maintenance. Regards, Christiaan.