Firepower Bidirection of AC rules

[StefanStankovic2195]

Hi Everyone,

Can somebody clarify my if I put access control rule in AC policy in firepower that allow traffic from A to B does it automatically permit traffic from B to A? I mean, do I need a new rule that will allow opposite direction?

for example, let's have a rule that allow 192.168.1.0/24 network to 192.168.2.0/24. 

If i try to ping from .2.0 to .1.0 will it be allowed?

Best regards,
Stefan

[Rob Ingram]

Hi @StefanStankovic2195 

If you permit traffic from A to B and A initiates the communication, the return traffic from B will be permitted. You would need a rule from B to A if B initiates the communication.

HTH

[Marius Gunnerud]

The return traffic will be allowed.  However, if you ping you need to make sure that icmp inspect command is present in the policy-map configuration or the return traffic will not be allowed.  TCP will be "inspected" and allowed.