What is a dynamic ACL on a Pix?

rolandshum · ‎08-07-2007

When I do a show acces-list on my Pix once in awhile I see a dynamic accesl-list. From reading here it seem associated with VPN's but I don't see anything specific.

Report Inappropriate Content · ‎08-13-2007

I think a dynamic acl is an acl created dynamically on pix when there is a need to pass some traffic which matches some protocol behaviour according to pix configuration. Dynamic acls are not specific to VPN's and they can used to pass traffic for protocols like SQL, FTP, etc which dynamically negotiate the port for data transfer or some other activity.

rigoberto.cintron · ‎08-13-2007

There different types of dynamic acl's in a pix/asa. Some are created to block malicius traffic and others are create to allow traffic based on the ASA(Adaptive Security Algorithm).