Solved: How to configure ASA 5585-X to Stateless Connection?

williammanurung · ‎05-03-2017

Hi Guys,

What my perspective, ASA is the stateful connection.

But, Can I configure ASA 5585-X as Stateless connection?

How to configure it?

Best regards,

William

Marvin Rhoads · ‎05-04-2017

Do you mean for the firewall in general or for the failover link in an HA pair?

In general the firewall is stateful - that is the nature of how it works and you can't make it stateless.

View solution in original post

Mohammed al Baqari · ‎05-04-2017

In addition to what Marvin said, you can configure TCP State-Bypass feature to make ASA stateless for connections what match the specified criteria (you use any any inside it).

http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/conns_tcpstatebypass.html

View solution in original post

Marvin Rhoads · ‎05-04-2017

Do you mean for the firewall in general or for the failover link in an HA pair?

In general the firewall is stateful - that is the nature of how it works and you can't make it stateless.

Mohammed al Baqari · ‎05-04-2017

In addition to what Marvin said, you can configure TCP State-Bypass feature to make ASA stateless for connections what match the specified criteria (you use any any inside it).

http://www.cisco.com/c/en/us/td/docs/security/asa/asa82/configuration/guide/config/conns_tcpstatebypass.html

williammanurung · ‎05-04-2017

Thanks for your help, its so helpfull :)