Default class inspection policy

[mahesh18]

Hi Everyone,

Need to know if default class inspection policy matches the incoming or outging traffic flowing through the ASA?

Example when i ping from PC  connecting to the ASA  to outside world will then it will match icmp traffic entering the ASA  then ICMP reply coming

to outside interface?

Thanks

MAhesh

[lcambron · Accepted solution]

Hello,

The ASA is stateful in both directions, so the policy matches incoming and outgoing traffic.

What happens is that you also have security levels, so from high to low it is allow but from low to high it will be deny unless you configure an ACL.

Regards,

Felipe.

[mahesh18]

Hi Felipe,

Many thanks for Prompt reply.

ASA is interesting world.

Regards

MAhesh