topic Implicit interface rule in Network Security

Implicit interface rule

mahesh18 — Tue, 12 Mar 2019 01:57:59 GMT

Hi Everyone,

I read below line --

Implicit interface access rule that permits all IP traffic from high security level to low security level interface is disabled

automatically after the global access list has been defined and applied.

Need to know what does it mean?

I know global ACL applies to whole ASA,its for traffic for the ASA itself and is always in inward direction.

Regards

MAhesh

Implicit interface rule

Julio Carvajal — Fri, 14 Jun 2013 03:50:48 GMT

Hello Mahesh,

Exactly,

If global ACL it's applied to all of the interfaces in the IN direction, then the implicit rule of :

'All traffic from higher to lower security level will be lost"

Why?

Because u will be allowing now only what's permitted in the Global ACL

Regards

Remember to rate all of the helpful posts.

For this community that's as important as a thanks.

Implicit interface rule

mahesh18 — Fri, 14 Jun 2013 14:35:26 GMT

Hi Julio,

But global ACL is for traffic to the ASA itself not passing through it.

ACL is for traffic passing through the ASA.

When you say 'All traffic from higher to lower security level will be lost" does this mean traffic passing through the ASA or traffic to the ASA itself?

Thanks

Mahesh

Implicit interface rule

Julio Carvajal — Fri, 14 Jun 2013 15:45:48 GMT

Hello Mahesh,

No, is not to the ASA only ( I mean it will filter data-plane and control plane traffic. Not just control-plane)

So it's traffic across and to the ASA,

Where did u hear it was to the ASA only?

Regards

Remember to rate all of the helpful posts.

For this community that's as important as a thanks.

Implicit interface rule

mahesh18 — Fri, 14 Jun 2013 15:49:07 GMT

Hi Julio,

May be i am wrong.

I will double check that and will update you.

Regards

Mahesh

Implicit interface rule

Julio Carvajal — Fri, 14 Jun 2013 16:01:23 GMT

Hello Mahesh,

Sure, take ur time,

Regards,

Remember to rate all of the helpful posts.

For this community that's as important as a thanks.

Re: Implicit interface rule

mahesh18 — Sat, 15 Jun 2013 23:30:58 GMT

Hi Julio,,

You are right Sir.

i was confusing this with Management access rule in the ASDM.

I again listen my training videos and it confirmed that you are correct.

Regards

MAhesh

Message was edited by: mahesh parmar

Re: Implicit interface rule

Julio Carvajal — Sun, 16 Jun 2013 05:12:41 GMT

Hello Mahesh,

My pleasure to help,

What training videos are you studying?

Regards

Remember to rate all of the helpful posts.

For this community that's as important as a thanks.

Implicit interface rule

mahesh18 — Sun, 16 Jun 2013 05:21:37 GMT

Hi Julio,

CBT Security CCNP --ASA.

They are really good and helping me out to understand the ASA.

Regards

MAhesh

Implicit interface rule

Julio Carvajal — Sun, 16 Jun 2013 17:59:40 GMT

Hello Mahesh,

Amazing, keep the hard work

Remember to rate all of the helpful posts.

For this community that's as important as a thanks.