ASA security issue access from low security level to high security level without nat

[jpmegel]

Hi, 

I'm experiencing a security issue. I have ASA 9.5.2. with some interfaces. a server on the lower security level can access another server on the higher security level without nat.

The server on the low level have an ACL allow it to any tcp/80.

Exemple: 

interface A 

security-level 50

Server A --> to any  : tcp/80

Interface B 

security-level 90

There is not nat between the 2 interfaces. 

Thanks for your help. 

Jpmegel

[Karsten Iwen]

Duplicate post. Discussion started here.