Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2155
  • Last Modified:

Cisco ASA 5505 Firewall - Trying to understand implicit rules

A coworker created and later deleted the SMTP exception on the Cisco ASA 5505 firewall shown in the image.  I want to better understand the implicit setting that appears below the SMTP exception.  When he deleted the SMTP exception, it disappeared and the implicit rule disappeared as well.  Does the implicit rule still exist even though it isn't visible?
Implicit-Rule-on-ASA-5505.png
0
jdana
Asked:
jdana
  • 2
  • 2
3 Solutions
 
JFrederick29Commented:
The implicit deny can not be removed.  There is always an implicit "deny ip any any" at the bottom of an access-list.

What ASDM may have done is removed the access-list since you deleted the last rule in the list.
0
 
jdanaAuthor Commented:
JFrederick29,

If I understand you correctly, the implicit rule is still in effect even though it isn't visible?

J
0
 
JFrederick29Commented:
As long as an acess-list is bound to the interface, yes.  If there is no access-list, the implicit nature of the Firewall takes place which is to allow all traffic from a higher security interface such as the inside interface to a lower security interface such as the outside.
0
 
jdanaAuthor Commented:
Thanks!
0

Featured Post

Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now