cisco asa default inspection

carl_townshend · ‎08-19-2010

Hi all

Can anyone tell me by default what traffic does the default inspection policy inspect? Am I right in saying the class matches all traffic, however the engine does not inspect everything by default, i.e no ftp, pptp ,sip etc.

why are these turned off by default? for example, I could not get a pptp connection working through the firewall until I made it inspect pptp traffic, why did turning it on fix the issue?

cheers

Carl

Jennifer Halim · ‎08-19-2010

Please find the following URL that tells you which inspection is on by default (the ones in bold):

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/inspect_overview.html#wp1536127

and PPTP inspection is not on by default.

Here is what PPTP inspection actually does:

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/i2.html#wp1741718

Hope that helps.