ASA packet flow

[Abhirajsingh yadav]

Hi 

Please help me to understand packet flow difference between asa8.2 and asa8.4.2

[Aditya Ganjoo]

Hi Abhiraj,

Please find the links for packet flows on 8.2 and 8.4:

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/113396-asa-packet-flow-00.html

On pre 8.3 packet flow was:

1. Routing

2. Inbound ACL

3. NAT

On post-8.3 ASA, for destination NAT, NAT is checked before the ACL and before the routing.

1. UN-NAT (destination NAT)/Partial Routing (find the exit interface based on NAT configuration)

2. ACL

You can check this link as well:

https://learningnetwork.cisco.com/thread/46543

Regards,

Aditya

Please rate helpful posts and mark correct answers.

[Abhirajsingh yadav]

HI Aditya, 

Thanks for sharing link but it contain only packet flow of 8.2 not 8.4

How packet flow with source nat 8.4 compared to 8.2

[Aditya Ganjoo · Accepted solution]

Hi Abhiraj,

I have already shared the link for the packet flow on ASA 8.4:

https://learningnetwork.cisco.com/thread/46543

Here is another link:

https://supportforums.cisco.com/discussion/12526266/order-operation-asa

Regards,

Aditya

Please rate helpful posts and mark correct answers.