Reverse-Proxy on ASA

Posted on 2014-07-10
Last Modified: 2014-07-11
Are 5500 series (specifically 5505) Cisco ASA's capable of doing reverse-proxy filtering?

For example, could the following configuration work:

(From WAN)->>Natted to ASA->ASA sees 'subdomain1' and routes to internal ip:port
(From Wan)->>Natted to ASA->ASA sees 'subdomain2' and routes to different internal IP:port
Question by:PDGPA
    LVL 61

    Assisted Solution

    It does load balancing (see official doc)
    It does not do session affinity
    LVL 41

    Accepted Solution

    Are both of your external addresses subdomain1 and subdomain2 using the same or different public IPs? If they are using different IPs then there's no problem. If you have multiple public IPs then you just need to NAT each internal server. I am unaware of the ASA being able to inspect the http traffic and make a NAT decision based on traffic it sees. You could have a reverse proxy on your network that does this if you don't have public addresses available.

    Author Comment

    Awesome, thank you both.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Why You Should Analyze Threat Actor TTPs

    After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

    This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
    Join Greg Farro and Ethan Banks from Packet Pushers ( and Greg Ross from Paessler ( for a discussion about smart network …
    Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
    Here's a very brief overview of the methods PRTG Network Monitor ( offers for monitoring bandwidth, to help you decide which methods you´d like to investigate in more detail.  The methods are covered in more detail in o…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    6 Experts available now in Live!

    Get 1:1 Help Now