Async routing through an ASA

[scott-goodwin]

Hi Guys,

This is a little bit of an odd request however I need to allow a sync routing due to some legacy routing to pass through my ASA.

I have allowed IP any any between the particular hosts involved to allow for high ports etc..

However the ASA is tearing down the session as it never see's the ACK.

Hence is there a way to turn off the ip inspection or some other way to get this traffic through the firewall.

Thanks

Scott

[andrew.prince]

Scott,

Errrm - that would really defeat the whole idea of a firewall? You could perform TCP SYN attacks on the firewall and DoS it out?! You could even do this by mistake on what you want to do!

Perhaps you should replace the firewall with a route and write use simple ACL's?

HTH.