topic Re: PIX 7.2 Packet Processing Order ? in Network Security

PIX 7.2 Packet Processing Order ?

Andrew von Nagy — Fri, 21 Feb 2020 09:13:21 GMT

I have searched for documentation regarding the order of operations for packet processing in the PIX 535 appliance for both inbound and outbound packets, but cannot find any.

Does anyone have a reference as to what order ACLs, Xlate, Conn, and NAT lookups occur on packets in the PIX?

Andrew

Re: PIX 7.2 Packet Processing Order ?

andrew.burns — Mon, 09 Oct 2006 07:54:42 GMT

Hi,

It's not as well documented as IOS, but the following links should get you started:

http://www.cisco.com/en/US/products/ps6120/products_configuration_guide_chapter09186a0080450d38.html#wp1144240

http://www.cisco.com/en/US/products/ps6120/products_configuration_guide_chapter09186a0080450bf6.html#wp1043760

HTH

Andrew.

Re: PIX 7.2 Packet Processing Order ?

anthony.king — Mon, 09 Oct 2006 10:46:09 GMT

You could also try the 'packet-tracer' command. It will show you the actual steps that are taken for a packet that you can specify.

Re: PIX 7.2 Packet Processing Order ?

m.sir — Mon, 09 Oct 2006 12:32:35 GMT

Check drawing in attachement

Hope that helps

Re: PIX 7.2 Packet Processing Order ?

unicmd — Mon, 09 Oct 2006 13:31:32 GMT

hey,

if you deside to upgrade to 7.2.x

u can use the packet-tracer, show xlate debug + other commands that are very! use full to debugging traffic on pix/asa

Martin