Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 

ASA CONNECTION FLAGs.docx

Comments
Community Member

I like your doc and your approach.  However I find your last example to be a bit misleading.  You state :"

aB- Awaiting SYN from Inside and B since packet was originated from outside."

Really the aB is signifying that we are awaiting an outside ack to inside syn, and the connection was initiated from the outside.  Basically 2 out of the 3 parts of the handshake has been completed, and the firewall is waiting for the last ack from the outside router to the inside host.  Great paper btw..I followed it in my home lab.

Hi Jason,

Flags of aB means that ASA is receiving SYN packet from outside host towards the INSIDE server, however, it never receives the SYN-ACK back.

Thanks

Ajay

2444
Views
5
Helpful
2
Comments