ACLs and Service Policies on FW??

[CiscoBrownBelt]

OK,  I have a lab FW where both interfaces are security level 0 and there are no ACLs applied to any of the interfaces (inside, outside), and there are Global Policy inspection_default rule actions for common protocols such as SIP, ICMP, FTP, etc., this means all this type of traffic can go in and out of the FW interfaces?

[Dennis Mink]

no, inspection is not the same as ACLs.

for instance if you inspect FTP, you would still need to put an acl in place to allow ftp.

inspection is done on a application layer, its inspects the traffic and opens up ports dynamically, for instance sip inspection, allows RTP to be opened up so voice can traverse the FW without explicit allow rules

[CiscoBrownBelt]

Ok. There are no ACLs applied to the interfaces (inside, outside) and both are set to security level 0.