Control plane ACL on ASA

krishnadig — Fri, 21 Feb 2020 13:56:30 GMT

Hi!

On ASA, suppose I apply a inbound control plane ACL on outside interface; what will be the impact / consequence to the inbound traffic that is using outside interface IP for PAT or Static PAT.

Control plan ACL is applied to restrict to-the-box traffic.

Thanks in advance

Krishna

Hello Krishna-

nspasov — Thu, 20 Oct 2016 21:57:34 GMT

Hello Krishna-

Take a look at the link below that I think will help you configure control-plane based ACL for your Firewall:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa95/configuration/firewall/asa-95-firewall-config/access-rules.html

So by adding the control-plane keyword to the ACL entry, the traffic inspection applies to traffic destined to the ASA. Without the control-plane keyword, the ACL entries will apply to traffic traversing through the ASA.

Also, keep in mind that ASA based control-plane ACLs (telnet, ssh, http, etc) will override the control-plane ACL applied on the interface.

I hope this helps!

Thank you for rating helpful posts!

topic Hello Krishna- in Network Security

Control plane ACL on ASA

Hello Krishna-