Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

ACL question

Posted on 2009-07-14
2
Medium Priority
?
249 Views
Last Modified: 2012-05-07
If I explicitly let traffic leave my pix (from the inside to outside), is that traffic allowed back in (via the state table), even if I have an ACL that explicitly denies it on the outside int?
0
Comment
Question by:WERAracer
2 Comments
 
LVL 29

Accepted Solution

by:
Jan Springer earned 2000 total points
ID: 24850884
cisco access-lists are implicit deny when not specified.  so, yes, it shouldn't be a problem if it's a 'deny any any'.
0
 
LVL 10

Expert Comment

by:stsonline
ID: 24852874
The outside deny statement will be bypassed for traffic initiated on the inside since they consider an established connection as allowed.
0

Featured Post

Prepare for your VMware VCP6-DCV exam.

Josh Coen and Jason Langer have prepared the latest edition of VCP study guide. Both authors have been working in the IT field for more than a decade, and both hold VMware certifications. This 163-page guide covers all 10 of the exam blueprint sections.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

WARNING:   If you follow the instructions here, you will wipe out your VTP and VLAN configurations.  Make sure you have backed up your switch!!! I recently had some issues with a few low-end Cisco routers (RV325) and I opened a case with Cisco TA…
You deserve ‘straight talk’ from your cloud provider about your risk, your costs, security, uptime and the processes that are in place to protect your mission-critical applications.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Both in life and business – not all partnerships are created equal. As the demand for cloud services increases, so do the number of self-proclaimed cloud partners. Asking the right questions up front in the partnership, will enable both parties …

782 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question