ASA Old and New Packet Flow

[fatalXerror]

Hi Guys,

Do you know if Cisco Firewall behavior is based on RFC?

In addition, what is the difference between old 8.2 to 9.x in terms of the packet flow from ingress to egress?

Thanks

[balaji.bandi]

here is the packet flow :

https://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/113396-asa-packet-flow-00.html

[fatalXerror]

Hi @balaji.bandi ,

Thanks for the feedback. I saw this link already but it only talks for the 8.2, is it the same as the 9.x code?

Thanks

[balaji.bandi]

Personally i do not believe anything change in packet flow (other than IPS)

 only major changes from 8.3 code to higher as below :

https://community.cisco.com/t5/security-documents/asa-8-3-upgrade-what-you-need-to-know/ta-p/3127078

[Marvin Rhoads]

ASA order of operations for current (9.x) releases look like the screenshot below. I took it from a Cisco Live presentation. There are numerous such presentations over the past several years that you can research and see the process explained in more depth.