topic HI Aditya, in Network Security

ASA packet flow

Abhirajsingh yadav — Tue, 12 Mar 2019 07:43:18 GMT

Please help me to understand packet flow difference between asa8.2 and asa8.4.2

Aditya Ganjoo — Sat, 07 May 2016 10:07:53 GMT

Hi Abhiraj,

Please find the links for packet flows on 8.2 and 8.4:

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/113396-asa-packet-flow-00.html

On pre 8.3 packet flow was:

1. Routing

2. Inbound ACL

3. NAT

On post-8.3 ASA, for destination NAT, NAT is checked before the ACL and before the routing.

1. UN-NAT (destination NAT)/Partial Routing (find the exit interface based on NAT configuration)

2. ACL

You can check this link as well:

https://learningnetwork.cisco.com/thread/46543

Regards,

Aditya

Please rate helpful posts and mark correct answers.

Abhirajsingh yadav — Sat, 07 May 2016 10:30:01 GMT

HI Aditya,

Thanks for sharing link but it contain only packet flow of 8.2 not 8.4

How packet flow with source nat 8.4 compared to 8.2

Aditya Ganjoo — Sat, 07 May 2016 10:38:00 GMT

Hi Abhiraj,

I have already shared the link for the packet flow on ASA 8.4:

https://learningnetwork.cisco.com/thread/46543

Here is another link:

https://supportforums.cisco.com/discussion/12526266/order-operation-asa

Regards,

Aditya

Please rate helpful posts and mark correct answers.