Security Level and FWSM

pslavkovsky — Mon, 11 Mar 2019 11:33:36 GMT

Hi,

I read that all traffic on FWSM is explicitly denied. How is a sense of security level for FWSM?

Thanks

Peter

Re: Security Level and FWSM

Jon Marshall — Wed, 21 Nov 2007 11:40:46 GMT

Hi Peter

Yes you do need to explicitly allow traffic with an access-list even if traffic is going from the inside interface (highest security level) to the outside (lowest security level).

But all the other rules still apply in that you can give interfaces the same security level and have traffic flow between them without access-list, you still need to setup static NAT translations for lower to higher level security interfaces (unless you turn off NAT) so it's still pretty much the same as you are presumably used to.

HTH

Jon

topic Security Level and FWSM in Network Security

Security Level and FWSM

Re: Security Level and FWSM