Z3 VPN to ASA

[jwest8]

We have a ASA firewall in our head quarters and would like to use a few Z3s for remote teleworkers. The teleworkers have Cisco IP phones and some will be Finesse agents with our contact center. I have not been real successful finding documentation on using the Z3 with non Meraki devices. Does anyone have real world experience using the Z3 with non Meraki firewalls they would like to share?

[Ryan_Miles]

There are a number of links out there on the topic. Here are two of them.

https://documentation.meraki.com/MX/Site-to-site_VPN/MX_to_Cisco_ASA_Site-to-site_VPN_Setup

https://community.meraki.com/t5/Security-SD-WAN/Meraki-MX-and-ASA/m-p/118964

https://www.petenetlive.com/KB/Article/0001255

You'll honestly have a far better experience if you deploy a small MX at the head end and use AutoVPN vs. standard IPSec tunnels between the Z3 and ASA.

[Bruce]

Echoing what @Ryan_Miles said. If you’ve got a few Z3 devices then I’d put a small MX (MX64 or MX67) in VPN concentrator mode behind the ASA. Will make things a lot easier to setup and manage.