policy-map | nat0.net

Blog Archives

Asymmetric routing in ASA – TCP state bypass

Posted on February 1, 2010 by jimmy

Today I continued my work to fully understand MPF (Modular Policy Framework) and found a new cool feature in ASA 8.2: TCP State Bypass. By bypassing TCP state machine for certain traffic you can get around problems with asymettricrouting. In…

Tagged with: ASA, class-map, mpf, policy-map, routing
Posted in Cisco Security

Cisco ASA hairpinning

Cisco Pix/ASA hairpinning The term hairpinning comes from the fact that the traffic comes from one source into a router or similar devices, makes a U-turn and goes back the same way it came. Visualize this and you see something that looks like a hairpin. Hairpinning is only relevant when the firewall is in routed mode since the "turnaround" of Continue Reading →

Cisco ASA Anyconnect licensing for dummies, updated!

The picture below should be self-explaining. Click it for a larger version. Edit 2014: There was some errors in the logics around AEA-licenses. The picture below is now corrected. Please do not use the old version (v1.1). Let me explain this. First of all, Advanced Endpoint Assessment (AEA) is a feature where you can do advanced posture checks Continue Reading →

Blog Archives

Asymmetric routing in ASA – TCP state bypass

New posts

Popular Posts

Signuppp

Blog Archives

Asymmetric routing in ASA – TCP state bypass

New posts

Popular Posts

Tags

Signuppp