SFR Block with reset

[cpaquet]

On FirePOWER, Access Control Policies can be configured for blocking with RESET.

Cisco's documentation doesn't say if the RST flag is sent to both source and destination.  Some IPS vendors don't send the RST to the offender.

So, how is FirePOWER do it? Does it send RST to both parties? 

Thank you.

Cath.

[Claudiu Cismaru]

Want to know about the ACP rules block or IPS rules block? They are different things.

Also, it would depend on the rules and the rule matched....

[HQuest]

Old topic, but I was looking at something similar before I decided to try it by myself.

It sends the Reset flag to both sides of the communication.