topic asa default feature in Network Access Control

asa default feature

fm network — Mon, 11 Mar 2019 02:45:45 GMT

Dear All,

I have one ASA with version 8.2 and i want to know whether below fearure are bydefault enable or not as in running config its not showing.

feature:

fragment chain 1

floodguard {enable}

asa default feature

fm network — Sat, 10 Nov 2012 07:32:54 GMT

Dear All,

I have one ASA with version 8.2 and i want to know whether below fearure are bydefault enable or not as in running config its not showing.

feature:

fragment chain 1

floodguard {enable}

asa default feature

ashirkar — Sat, 10 Nov 2012 13:53:49 GMT

Dear fm network,

Please refer below link for your question:

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/conns_protect.html

Thanks and Regards,

Ashish Shirkar

(Technical community manager-Network Infrastructure)

Re: asa default feature

Karsten Iwen — Sat, 10 Nov 2012 14:02:23 GMT

there are two ways to find that out:

1) in the command-reference, all commands are shown with the defaults:

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/cmd_ref.html

2) with the command

show runn all

you see all configuration including the defaults.

With that you see that the default fragment chain is 24 packets.

For floodguard it is not that easy to find out. There you have to know that it's a command from old PIX-times and is now enabled by default and not configurable.