managing cisco ASA using vpn client

Cisco ASA remote management via VPN
February 14th, 2011
By default, remote access VPN users aren't able to manage a Cisco ASA
firewall on the inside interface using any kind of management protocol
(SSH, telnet, HTTPS).
You can enable remote management by specifying the management-access
interface. You can specify the interface via the CLI or via the Cisco
Adaptive Security Device Manager (ASDM). Both methods are specified
below.
CLI
fw01/booches.nl/act# configure terminal
fw01/booches.nl/act(config)# management-access inside
ASDM

When using the Management Access feature with remote VPN connections
(IPSec or SSL VPN) don't forget to add the VPN pool to the
corresponding management access protocols on the interface you
specified as management access interface

Taken from http://www.booches.nl/2011/02/cisco-asa-remote-management-via-vpn/

Replacement RSA token

If u got one of this for more than 6 months, throw them away and get replacement token(s) from your bank/it department. They are compromised

ASA 8.3.1 proxy arp

Whose brilliant idea is it anyway to change a sysopt setting between
minor releases?
And yeah 8.2 to 8.3 is a dot release hence a minor release.

By default, proxy arp is disabled starting from 8.3.1. I know i know
proxy ARP on the outside interface is a security risk, but most
network admin knows this already and would have disabled them if
needed.
What if you have a cross connect link with your ISP on the outside
interface that makes the security risk moot?

Found this the hard way when enabling a static nat on the outside
interface that nothing works. SYN packets are sent but SYN-ACK are
never received.
Firewall do not block anything, no debugging message in ASDM, packet
tracer shows nothing is wrong...
Wireshark shows that ARP request by the ISP PE are ignored with no
notification from the ASA.... Ughhhh Brilliant.

Enabling proxy arp by no sysopt noproxyarp PRODUCTIONINTERFACE or
entering a static ARP entry will fix this problem...

Brilliant move cisco, brilliant...