topic SGACL state-less / stateful? in Network Access Control https://community.cisco.com/t5/network-access-control/sgacl-state-less-stateful/m-p/3513358#M490702 <HTML><HEAD></HEAD><BODY><P>Hi all,</P><P></P><P>to my knowledge, SGACLs are normally statless, which means that I have to explictly allow return traffic in cases where SGACLs are used.</P><P></P><P>Are there any devices (besides ASA/FTD) which are stateful when using SGACLs?</P><P></P><P>Roland</P></BODY></HTML> Mon, 11 Mar 2019 08:44:17 GMT rmueller@cisco.com 2019-03-11T08:44:17Z SGACL state-less / stateful? https://community.cisco.com/t5/network-access-control/sgacl-state-less-stateful/m-p/3513358#M490702 <HTML><HEAD></HEAD><BODY><P>Hi all,</P><P></P><P>to my knowledge, SGACLs are normally statless, which means that I have to explictly allow return traffic in cases where SGACLs are used.</P><P></P><P>Are there any devices (besides ASA/FTD) which are stateful when using SGACLs?</P><P></P><P>Roland</P></BODY></HTML> Mon, 11 Mar 2019 08:44:17 GMT https://community.cisco.com/t5/network-access-control/sgacl-state-less-stateful/m-p/3513358#M490702 rmueller@cisco.com 2019-03-11T08:44:17Z Re: SGACL state-less / stateful? https://community.cisco.com/t5/network-access-control/sgacl-state-less-stateful/m-p/3513359#M490711 <HTML><HEAD></HEAD><BODY><P>Hi Roland,</P><P>all devices downloading SGACLs from ISE are stateless (switches, routers, AP's via WLC).</P><P>As you say, firewalls offer stateful inspection but they use SGFW rules, they don't download SGACLs from ISE.</P><P>Routers can offer stateful operation while using SGT's in zone based firewall setup but again, SGACLs are not downloaded for this function.</P></BODY></HTML> Fri, 29 Jun 2018 15:22:04 GMT https://community.cisco.com/t5/network-access-control/sgacl-state-less-stateful/m-p/3513359#M490711 jeaves@cisco.com 2018-06-29T15:22:04Z