Enabling unicast reverse path forwarding ASA

patrick.hurley — Tue, 20 Apr 2021 17:11:01 GMT

I am getting this message when using the Cisco CLI Analyzer on my ASA5505.

Cisco ASA Unicast Reverse Path Forwarding (uRPF) Bypass Vulnerability- CSCuv60724.

Should I remove these commands on the outside interface?

What about inside?

Re: Enabling unicast reverse path forwarding ASA

Rob Ingram — Tue, 20 Apr 2021 17:18:08 GMT

The bug says "This problem was introduced by ASA software version 9.3(3)". With the ASA 5505, the last version was 9.1.x, so this issue is unlikely to affect the version you are running.

Regardless, the ASA 5505 hardware is EOL, and the software has not been updated for several years, you are likely open to a considerable amount of bugs. Ideally you'd replace the hardware to a newer model such as the FPR-1010.

HTH

topic Enabling unicast reverse path forwarding ASA in Network Security

Enabling unicast reverse path forwarding ASA

Re: Enabling unicast reverse path forwarding ASA