On Oct 10, 2014, at 2:42 AM, Christopher Werny <[email protected]> wrote:

> I am wondering, does return traffic (for connections originated on the inside 
> network) get through  the ASA with the explicit deny ip any any statement in 
> the outside ACL?  

IIRC, there's some variation of 'permit established', and a bunch of 
UDP-tracking stuff, too.

Someone else will likely be able to give more detailed answers.

----------------------------------------------------------------------
Roland Dobbins <[email protected]> // <http://www.arbornetworks.com>

                   Equo ne credite, Teucri.

                          -- Laocoön


_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to