Resetting a connection matched by ACL

[Alex Ferenstein]

A requirement is to send a TCP Reset (RST) without changing ASA's global setting "service".

The protocol for the connection is unknown.

My understanding is that actions such as "reset", "drop" or "drop-connection" is for an "inspect" type Policy-Map and not for "Layer 3/4" type Policy-Map.

So, how can I send a TCP Reset for an ordinary connection attempt (matched by an ACL)?

[Vibhor Amrodia]

Hi,

The "service" command would be the only way to RESET a connection explicitly on the ASA device.

As you correctly pointed out this will be a global setting on the ASA device.

Thanks and Regards,

Vibhor Amrodia