ASA allowing traffic from lower security level to higher security level

joaopalmeida · ‎05-25-2007

Hi all,

Do you know of any bug in ASA SW where it is possible by default to pass traffic from an interface with a lower security level to an interface with a higher security level?

Thank you,

John

joaopalmeida · ‎05-25-2007

By the way, in my tests I found out that in SW version 7.x the only command necessary to pass traffic from the outside interface to the inside interface is an ACL in the outside interface. NAT is not necessary. In SW version 6.x this did not happen, both ACL and NAT were required.

Does anyone confirm this?

jaydhindsa · ‎06-01-2007

thats right starting from train 7.0 this is the way.

thx

JAy