For troubleshooting purposes, I'd like to make my ASA 5540 7.2 completely wide open, no inspection, no ACL etc. Allowing everything via ACL is no problem. But i'm curious about turning off the default packet inspection. Am I right that a 'no service-policy global_policy global' is all I need?
class-map inspection_default
match default-inspection-traffic
!
!
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect netbios
inspect rsh
inspect esmtp
inspect sqlnet
inspect sunrpc
inspect xdmcp
inspect pptp
inspect sip
inspect tftp
!
service-policy global_policy global
Start Free Trial
