ASA 8.2(1) Packet Trace

[chinpohpang851]

I'm doing a trace test but I don under this result, why is it outside to outside? isn't it supposed to be outside to inside? I have a rule for Dest IP.53.117 with service http but it always shows Implicit Rule dropped my packet, why?

[Bogdan Nita]

It depends on how the packets get routed based on routing or PBR.

To get an idea why the packet is routed back to the outside interface you can also have a look at the route lookup phase in the packet tracer.

I am guessing the traffic is being dropped at the acl phase because you do not have same-security-traffic permit intra-interface configured.

To get more info with the packet tracer you can run it from cli and add detailed keyword.

HTH

Bogdan