Cisco FTD FDM Access Control function

S3C — Tue, 15 Dec 2020 20:08:05 GMT

Hello!

Imagine I have 1 client and 1 server

I create a rule that allows the client to talk to the DC on certain ports like dns, kerberos, ldap, time, rpc (135).

Looks like this:

client - ports = any -> DC - ports = dns, kerberos, ldap, time, rpc, etc

Since the client is initiating the contact to the DC, im thinking the DC will also reply within the same session.

Or do I need to create a additional rule for a reply?

DC - ports = any -> client - ports = dns, kerberos, ldap, time, rpc, etc

Please correct me if im wrong

Thanks a lot!

Re: Cisco FTD FDM Access Control function

Francesco Molino — Thu, 17 Dec 2020 03:49:52 GMT

If the user starts the session and your rule allows this communication, there’s no need to create the reverse rule.

Your description is correct.