Solved

ASA EGRESS AND INGRESS

Posted on 2012-03-31
1
1,644 Views
Last Modified: 2012-06-27
Experts,

Assume I have an ASA 5510 with a very basic setup.

int e0/0 is the outside interface that is connected to the internet.
int e0/1 is the inside interface.

Now, computer 10.10.10.10 from the inside network browses the internet 4.4.4.4.

question 1: When I run a packet capture on this; is the inside interface the INGRESS interface and the outside interface the EGRESS interface?

question 2: If I want to see the return traffic coming back to 10.10.10.10 from 4.4.4.4, would I still look at the ingress capture? It looks like when you run a packet capture and specify an interface for ingress it automatically shows outbound and inbound traffic on that interface. Is that correct?
0
Comment
Question by:trojan81
1 Comment
 
LVL 17

Accepted Solution

by:
Kvistofta earned 500 total points
ID: 37793696
1) Yes. Ingress means inbound. Since the packet is coming IN TO the firewall from the inside interface, that is the ingress. The packet is going OUT FROM the outside interface, therefore it is the egress (outbound) interface.

2) When you capture packets on an interface, you see ALL packets, both ingress packets (packets entering the firewall on that interface) AND egress packets (packets leaving the firewall).

Best regards
Kvistofta
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to configure Site to Site VPN on a Cisco ASA.     (version: 1.1 - updated August 6, 2009) Index          [Preface]   1.    [Introduction]   2.    [The situation]   3.    [Getting started]   4.    [Interesting traffic]   5.    [NAT0]   6.…
There are many useful and sometimes not well documented or forgotten IOS or ASA/PIX commands. See IPE article here , there was also one on PacketU and on Cisco Tips & Tricks. Below are my favorites. I give also a few most often used for Cisco IPS an…
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…
Concerto provides fully managed cloud services and the expertise to provide an easy and reliable route to the cloud. Our best-in-class solutions help you address the toughest IT challenges, find new efficiencies and deliver the best application expe…

930 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now