ASA V7.2 Initial Sequence Number (ISN) Randomization

h.schwob — Mon, 11 Mar 2019 10:17:29 GMT

Problem: We try to configure Initial Sequence Number (ISN) Randomization

but we see varying information on CCO websites about its operation.

Details:

"I'm trying to determine the answer to the question: Do Cisco ASAs

randomise TCP Sequence Numbers between same security level interfaces

when using the Static command to do Static NAT?

Many thanks for your help

Regards , Hubert.

Re: ASA V7.2 Initial Sequence Number (ISN) Randomization

sebastan_bach — Fri, 25 May 2007 19:03:42 GMT

i guess the isn randomisation is only for dynamic nat translations and not for static nats.

regards

sebastan