topic Re: ASA firewall policy in Network Security

ASA firewall policy

whanson — Mon, 11 Mar 2019 22:27:15 GMT

Let's suppose you have a server that is accessed via telnet. Further let us suppose that this application wasn't written very well such that it issues packets that don't have an associated syn or whatever. Now in a LAN environment who cares but in a firewall environment these packets are thrown away rather than the end point saying, ,"HuH?" Bottomline is there a way to stop the ASA firewall from inspecting something related to a specific host. In other words have the ASA just pass it through even though there isn't a state or the application is not playing by the rules. I suspect not but thought I would ask.

thx

ASA firewall policy

Julio Carvajal — Thu, 09 Feb 2012 21:16:55 GMT

Hello Whanson,

I would say TCP state-bypass. This will not inspect the TCP protocol on a stateful way.

That should do it!

Regards,

Julio

Do rate all the helpful posts!!

Re: ASA firewall policy

whanson — Thu, 09 Feb 2012 21:20:29 GMT

Where is that command entered? And thx

Re: ASA firewall policy

whanson — Thu, 09 Feb 2012 21:22:29 GMT

Sorry found it as part of policymap thx again

ASA firewall policy

Julio Carvajal — Thu, 09 Feb 2012 21:25:32 GMT

Hello,

Correct. let me know if I can do something else for you.

Otherwise please mark the question as answered so future users can learn from this.

Regards,

Julio

Re: ASA firewall policy

whanson — Thu, 09 Feb 2012 21:46:59 GMT

Your are the man. Thank you very much.

Re: ASA firewall policy

Julio Carvajal — Thu, 09 Feb 2012 21:52:08 GMT

Hello Whanson,

It is my pleasure to help!

please mark the question as answered so future users can learn from this.

Julio