Solved

Cisco ASA 5505 Firewall - Trying to understand implicit rules

Posted on 2010-11-17
4
2,106 Views
Last Modified: 2012-05-10
A coworker created and later deleted the SMTP exception on the Cisco ASA 5505 firewall shown in the image.  I want to better understand the implicit setting that appears below the SMTP exception.  When he deleted the SMTP exception, it disappeared and the implicit rule disappeared as well.  Does the implicit rule still exist even though it isn't visible?
Implicit-Rule-on-ASA-5505.png
0
Comment
Question by:jdana
  • 2
  • 2
4 Comments
 
LVL 43

Accepted Solution

by:
JFrederick29 earned 250 total points
ID: 34156518
The implicit deny can not be removed.  There is always an implicit "deny ip any any" at the bottom of an access-list.

What ASDM may have done is removed the access-list since you deleted the last rule in the list.
0
 

Assisted Solution

by:jdana
jdana earned 0 total points
ID: 34156957
JFrederick29,

If I understand you correctly, the implicit rule is still in effect even though it isn't visible?

J
0
 
LVL 43

Assisted Solution

by:JFrederick29
JFrederick29 earned 250 total points
ID: 34157023
As long as an acess-list is bound to the interface, yes.  If there is no access-list, the implicit nature of the Firewall takes place which is to allow all traffic from a higher security interface such as the inside interface to a lower security interface such as the outside.
0
 

Author Closing Comment

by:jdana
ID: 34216107
Thanks!
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
DHCP Server 14 88
Cisco ASA LDAP Authentication for VPN and Management 8 35
ISP Change 14 51
Network Vs Redistribute Connected Commands 3 12
In the world of WAN, QoS is a pretty important topic for most, if not all, networks. Some WAN technologies have QoS mechanisms built in, but others, such as some L2 WAN's, don't have QoS control in the provider cloud.
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question