Solved: ASA and UDP

david_prakken · ‎08-18-2003

Can someone answer how ASA creates "state" with UDP traffic? I have seen the matrix document of the approved UDP services, but I would like a better understanding of what makes it work.

TIA

Dave

mostiguy · ‎08-18-2003

It keeps track of what goes out, and to whom (source and destination ports and ip addresses). If replies come back in the alloted time (i think the default udp timeout is 90 seconds, but don't hold me to it), they are let in. Inbound udp packets for which there is no associated outbound stateful entry are dropped.

View solution in original post

mostiguy · ‎08-18-2003

It keeps track of what goes out, and to whom (source and destination ports and ip addresses). If replies come back in the alloted time (i think the default udp timeout is 90 seconds, but don't hold me to it), they are let in. Inbound udp packets for which there is no associated outbound stateful entry are dropped.

david_prakken · ‎08-18-2003

Thanks!