I would like to setup a SPAN port on my outside interface on the ASA 5505. I would like to see all traffice whether inbound or outbound. Setting up a SPAN port seems pretty straight forward, my question is, if a packet hits the outside interface and is dropped will a copy of the packet still be sent to the SPAN destination? Or does the packet have to actually enter the ASA for a copy of the packet to be sent to the ASA? I've been unable to find a clear answer to this question but I would like to know before configuring the SPAN port. Any help is much appreciated!