Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

ASA firewall policy

Let's suppose you have a server that is accessed via telnet.  Further let us suppose that this application wasn't written very well such that it issues packets that don't have an associated syn or whatever.  Now in a LAN environment who cares but in a firewall environment these packets are thrown away rather than the end point saying, ,"HuH?"  Bottomline is there a way to stop the ASA firewall from inspecting something related to a specific host. In other words have the ASA just pass it through even though there isn't a state or the application is not playing by the rules.  I suspect not but thought I would ask.

thx

6 REPLIES

ASA firewall policy

Hello Whanson,

I would say TCP state-bypass. This will not inspect the TCP protocol on a stateful way.

That should do it!

Regards,

Julio

Do rate all the helpful posts!!

Looking for some Networking Assistance? Contact me directly at jcarvaja@laguiadelnetworking.com I will fix your problem ASAP. Cheers, Julio Carvajal Segura http://laguiadelnetworking.com
New Member

Re: ASA firewall policy

Where is that command entered? And thx

New Member

Re: ASA firewall policy

Sorry found it as part of policymap thx again

ASA firewall policy

Hello,

Correct. let me know if I can do something else for you.

Otherwise please mark the question as answered so future users can learn from this.

Regards,

Julio

Looking for some Networking Assistance? Contact me directly at jcarvaja@laguiadelnetworking.com I will fix your problem ASAP. Cheers, Julio Carvajal Segura http://laguiadelnetworking.com
New Member

Re: ASA firewall policy

Your are the man. Thank you very much.

Re: ASA firewall policy

Hello Whanson,

It is my pleasure to help!

please mark the question as answered so future users can learn from this.

Julio

Looking for some Networking Assistance? Contact me directly at jcarvaja@laguiadelnetworking.com I will fix your problem ASAP. Cheers, Julio Carvajal Segura http://laguiadelnetworking.com
274
Views
0
Helpful
6
Replies