access to wireless behind firewall

[brianblank]

I am thinking connecting a wireless router behind the ASA _could_ expose the ASA if the wireless side were compromised. If I connect the clerk computers then the ASA, then a wireless, then the broadband link, is that a problem?

[aebrown]

I am thinking connecting a wireless router behind the ASA _could_ expose the ASA if the wireless side were compromised. If I connect the clerk computers then the ASA, then a wireless, then the broadband link, is that a problem?

Yes, that is definitely a problem, since anyone that connects to the wireless router would then be connected to the Internet without going through the ASA firewall. That is contrary to policy (and needlessly exposes any computer connected this way to all sorts of bad stuff).

Instead, the only thing connected to the broadband router should be the ASA firewall. Then you can connect anything (including a wireless router) to the ASA and everything should have the protection of the firewall.

[russellhltn]

I am thinking connecting a wireless router behind the ASA _could_ expose the ASA if the wireless side were compromised.

Expose it how? I believe it's still password protected.

If you're using a Wireless with a built-in router, there's ways of configuring it so that no one on the wireless can talk to anything but the Internet.