IPsec Anti-Replay

[dina.hassan.a]

I was just wondering if I can Configure IPsec Anti-Replay Window: Expanding and Disabling on a Crypto Map (on a spacfic crypto and to override the global rule) on  ASA 
Cisco Adaptive Security Appliance Software Version 9.5(1)

[JP Miranda Z]

Hi dina.hassan.a,

You can modify the size or disable the feature globally but there is no way to do it to a specific crypto map.

You can use the command crypto ipsec security-association replay window-size to modify the size or disable it with crypto ipsec security-association replay disable.

The following link helps you understand the anti replay check feature:

http://www.cisco.com/c/en/us/support/docs/ip/internet-key-exchange-ike/116858-problem-replay-00.html

Hope this info helps!!

Rate if helps you!! 

-JP-