(Is this too application specific? It seems like a reasonable question that would be useful to other people...)
So, I've got this ASA in front of a network that I didn't set up. It's been configured with the clicky GUI (the ASDM), not the CLI, but I'm willing to use the CLI if it makes more sense. One of the jobs of this ASA is to allow remote users to VPN in and use internal stuff. It does this well enough. However, now I'm wanting to limit where those VPN users go. Where do I insert firewall rules for them? There are two networks on the thing, creatively labeled "outside" and "inside".
If I were making a firewall rule to say "X external entity can get at this internal thing", I would put it on the "outside" interface. Same for VPN clients?