Corresponding Statements needed on Outside and Inside on ASA

[CiscoBrownBelt]

On an ASA if you need let's say ANY source IP on OUTSIDE to hit 10.10.10.10 on Inside, do you need the "10.10.10.10 to ANY" statement on the Inside ACL if you don't need 10.10.10.10 to initiate the traffic?

[GRANT3779 · Accepted solution]

Hi,

If traffic is always initiated from Out to In then no ACL entry needed for the return traffic.It will be allowed due to the stateful nature of the ASA.