troubleshooting Question

permit tcp any any established

Avatar of viperacom
viperacom asked on
6 Comments1 Solution6079 ViewsLast Modified:
i had permit tcp any any established in my access-list 100 (used on the dialer interface inbound).
I recently removed it and users seem to have no problems browsing the web but i now notice a lot of dropped packets on port 80 from the web to my network.
Do I need this line in my access-list and does it present any risk to security.
The reason I removed it was because it seemed like the only rule that could have let through a spoofed packet on port 11- systat. My ISA Server caught that and dropped it so now I'm trying to ensure the Cisco Firewall is definately tight.

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 6 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 6 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros