PIX 515 E

[gauravprakash]

Hi,

Following info about PIX.

Inside to Outside: If a user from the inside starts a connection to the outside (or to be more precise, to an interface with a lower security level), this connection will by default be permitted, and the return packets of this connection too.

How does the pix knows that an outsider or an insider started a particular connection, which it should deny pr permit.????

[rais]

For TCP session to start there must be a SYN packet sent from the initiator of the session. If that packet comes from outside, PIX simply discards it and session never comes up.

Hope this helps.

[thisisshanky]

You can read more about ASA algorithm here..

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_chapter09186a00800b6f0e.html