topic Re: When "same-security-traffic permit inter-interf" is appl in Network Security

When "same-security-traffic permit inter-interf" is applied with ACL

S891 — Tue, 07 Dec 2021 19:08:55 GMT

I have read some posts and command reference documents regarding "same-security-traffic permit inter-interface". There seems to be conflicting information when it is applied with the ACL as the behaviour might have changed over the years (not sure).

Some posts suggests that when traffic is flowing b/w interafces at same security level, if the ACL is applied, it takes precedence over the same security permit statement. There are other statements which claim that ACL, if present, is bypassed when the traffic is flowing b/w interfaces at same security level.

Which statement is true for the 9.x versions.

Re: When "same-security-traffic permit inter-interf" is appl

Rob Ingram — Tue, 07 Dec 2021 19:50:40 GMT

@S891 if you have an ACL configured this will take precedence and this will be checked to determine whether traffic is permitted or not. In this scenario the command "same-security-traffic permit inter-interface" is irrelevant.

Re: When "same-security-traffic permit inter-interf" is appl

MHM Cisco World — Wed, 08 Dec 2021 19:59:02 GMT

https://networkdirection.net/articles/firewalls/asa-securitylevels/

please see above link, it show the relation between the ACL and Security level "which effect by same security command".