<div>
Yes, the acl change will be needed. Good call.
</div>


Yes, the acl change will be needed. Good call.

<div>
Excellent - that seems to be working.
</div>


<div>
<div class="content wysiwyg-content">
I have 2 locations with ASA 5505's (8.4 code), and a tunnel between the 2 sites. &nbsp;All is working fine for remote site (Site B) to access resources in Site A.<br />
<br />
I now need Site B to access the INTERNET using Site A's Internet connection - that is, from Site B to <a href="http://www.google.com" rel="ugc">www.google.com</a>, traffic goes:<br />
<br />
Site B PC --&gt; Site B ASA ---&gt; &nbsp; TUNNEL ---&gt; &nbsp;Site A ASA oustide &nbsp;then hairpin back out to Internet (and find its way back to Site B, of course).<br />
<br />
I know I need to double NAT everything at Site B into the tunnel - not a problem. &nbsp;Essentially *ALL* traffic leaving Site B goes into the tunnel.<br />
<br />
The problem is at Site A - the traffic from Site B for internal resources goes to &quot;inside&quot;, and web requests turn around and go out &quot;outside&quot;.<br />
<br />
Help!!!?!?!
</div>
</div>


I have 2 locations with ASA 5505's (8.4 code), and a tunnel between the 2 sites.  All is working fine for remote site (Site B) to access resources in Site A.

I now need Site B to access the INTERNET using Site A's Internet connection - that is, from Site B to www.google.com, traffic goes:

Site B PC --> Site B ASA --->   TUNNEL --->  Site A ASA oustide  then hairpin back out to Internet (and find its way back to Site B, of course).

I know I need to double NAT everything at Site B into the tunnel - not a problem.  Essentially *ALL* traffic leaving Site B goes into the tunnel.

The problem is at Site A - the traffic from Site B for internal resources goes to "inside", and web requests turn around and go out "outside".

Help!!!?!?!

Cisco ASA 5505 site to site with shared internet access - NAT

Cisco PIX is a dedicated hardware firewall appliance; the Cisco Adaptive Security Appliance (ASA) is a firewall and anti-malware security appliance that provides unified threat management and protection the PIX does not. Other Cisco devices and systems include routers, switches, storage networking, wireless and the software and hardware for PIX Firewall Manager (PFM), PIX Device Manager (PDM) and Adaptive Security Device Manager (ASDM).

Cisco

A virtual private network (VPN) is a network that uses a public telecommunication infrastructure, such as the Internet, to provide remote offices or travelling users access to a central organizational network securely. VPNs encapsulate data transfers using secure cryptographic methods and other security mechanisms to ensure that only authorized users can access the network and that the data cannot be intercepted.