topic Default class inspection policy in Network Security

Default class inspection policy

mahesh18 — Tue, 12 Mar 2019 01:23:50 GMT

Hi Everyone,

Need to know if default class inspection policy matches the incoming or outging traffic flowing through the ASA?

Example when i ping from PC connecting to the ASA to outside world will then it will match icmp traffic entering the ASA then ICMP reply coming

to outside interface?

Thanks

MAhesh

lcambron — Fri, 05 Apr 2013 02:30:30 GMT

Hello,

The ASA is stateful in both directions, so the policy matches incoming and outgoing traffic.

What happens is that you also have security levels, so from high to low it is allow but from low to high it will be deny unless you configure an ACL.

Regards,

Felipe.

mahesh18 — Fri, 05 Apr 2013 02:40:07 GMT

Hi Felipe,

Many thanks for Prompt reply.

ASA is interesting world.

Regards

MAhesh