topic ASA Query in Network Security https://community.cisco.com/t5/network-security/asa-query/m-p/2141144#M359792 <P>Hello</P><P></P><P>Three zones/interface are used on ASA</P><P></P><P>Internet - security level 0</P><P>Inside - security level 100 with ipsec configured for vpn clients</P><P> DMZ - security level 100</P><P></P><P>Traffic from Inside to Internet works fine without ACL.</P><P></P><P>Traffic from DMZ to Internet works when ACL is applied.</P><P></P><P>As per my knowledge traffic from higher security zone to lower zone is allowed by default.</P><P></P><P>Please suggest what could be the reason here.</P><P></P><P>Regards</P><P></P><P>Jawwad</P> Tue, 12 Mar 2019 01:16:57 GMT jawwadparacha 2019-03-12T01:16:57Z ASA Query https://community.cisco.com/t5/network-security/asa-query/m-p/2141144#M359792 <P>Hello</P><P></P><P>Three zones/interface are used on ASA</P><P></P><P>Internet - security level 0</P><P>Inside - security level 100 with ipsec configured for vpn clients</P><P> DMZ - security level 100</P><P></P><P>Traffic from Inside to Internet works fine without ACL.</P><P></P><P>Traffic from DMZ to Internet works when ACL is applied.</P><P></P><P>As per my knowledge traffic from higher security zone to lower zone is allowed by default.</P><P></P><P>Please suggest what could be the reason here.</P><P></P><P>Regards</P><P></P><P>Jawwad</P> Tue, 12 Mar 2019 01:16:57 GMT https://community.cisco.com/t5/network-security/asa-query/m-p/2141144#M359792 jawwadparacha 2019-03-12T01:16:57Z ASA Query https://community.cisco.com/t5/network-security/asa-query/m-p/2141145#M359793 <HTML><HEAD></HEAD><BODY><P>It should be permited by default...</P><P></P><P>does not make any sense</P><P></P><P>Can you share the configuration while not working, and the IP address of the source and destination you are using</P><P></P><P>Regards</P></BODY></HTML> Wed, 20 Mar 2013 17:15:08 GMT https://community.cisco.com/t5/network-security/asa-query/m-p/2141145#M359793 Julio Carvajal 2013-03-20T17:15:08Z