Firewall – CISCO ASA 5510: How to view the number of connections per second

Surely, you can achieve this scenario. It is called "Hairpinning" . you need the following : - configure the remote-access users POOL to be part of the crypto access-list associated with crypto map - configure NAT-EXEMPT or NO-NAT access-list to include the pool.

most importantly:

• configure this command: "same-security-traffic permit intra-interface" to permit traffic to come in and go out the same interface in Cisco ASA.
• configure the tunnel peer (router) to include the remote-access users pool in the crypto access-list, because the L2L tunnel crypto access-list must be mirrored in both peers.
• if remote access users use split-tunneling, then you need to ensure that the subnets behind the remote peer (router) are included in the split-tunnel access-list

see this: https://supportforums.cisco.com/message/3864922

Hope This Helps.

Mashal

The PIXOS feature you are looking for is called Time Based Access List. It is a two step approach

1. Create the time-range object
2. Attach the time-range object to a specific rule

The ASA will then only apply the targeted rule during that time-range. You should be able to get what you want with something like this

hostname(config)#time-range OffHours
hostname(config-time-range)#periodic weekdays 17:00 to 07:00
hostname(config)#access-list Residence line 1 extended permit ip any any time-range OffHours
hostname(config)#access-group Residence in interface inside

Full write-up at Cisco Command Reference