ASA - Security Levels Question

jim_berlow — Mon, 11 Mar 2019 15:14:31 GMT

I understand that you can go from a higher security interface to a lower security interface without configuring acls. The ASDM shows that there is an implicit rule allowing this. My question is - once I configure an access rule on the ASDM, that line disappears. Does that mean that I no longer have an implicit rule allowing me to go from a higher security interface to a lower security interface. I am entering a rule to allow a DMZ interface (level 50) to reach some internal servers on the inside (level 100). Once I configure this rule, have I now cutoff access to the level 0 interface?

Thanks,

Jim

Re: ASA - Security Levels Question

John Blakley — Fri, 03 Apr 2009 20:55:16 GMT

Jim,

No, the higher levels will still be able to go out. Have you noticed a problem?

HTH,

John

topic ASA - Security Levels Question in Network Security

ASA - Security Levels Question

Re: ASA - Security Levels Question