Implicit Behavioral Differences - Revision history

Mikecrowe4ics: Re-worded description of FWSM implicit deny for clarity.

2010-05-07T01:11:35Z

Re-worded description of FWSM implicit deny for clarity.

← Older revision		Revision as of 01:11, 7 May 2010
Line 7:		Line 7:
	\|-		\|-
	\| Implicit Deny		\| Implicit Deny
-	\| ~~Implicit~~ deny ~~between~~ all interfaces.	+	\| By default, implicit deny for all IP traffic between interfaces, regardless of security level.
	\| Implicit permit from high security to low security interfaces.		\| Implicit permit from high security to low security interfaces.
	\|-		\|-

Lorlando at 20:44, 28 August 2009

2009-08-28T20:44:19Z

← Older revision		Revision as of 20:44, 28 August 2009
Line 1:		Line 1:
	==Implicit Behavioral Differences==		==Implicit Behavioral Differences==
	The following table lists the implicit behavioral differences between FWSM and ASA.		The following table lists the implicit behavioral differences between FWSM and ASA.
-	{\| ~~class~~="~~wikitable~~"	+	{\| border="1" cellpadding="2"
-	\|-	+	!width="250" align="left" style="background:#99CCFF;" \|'''Implicit Behavior'''
-	!'''Implicit Behavior'''	+	!width="450" align="left" style="background:#99CCFF;" \|'''Behavior in FWSM'''
-	!'''Behavior in FWSM'''	+	!width="250" align="left" style="background:#99CCFF;" \|'''Behavior in ASA'''
-	!'''Behavior in ASA'''	+
	\|-		\|-
	\| Implicit Deny		\| Implicit Deny

Lorlando: New page: ==Implicit Behavioral Differences== The following table lists the implicit behavioral differences between FWSM and ASA. {| class="wikitable" |- !'''Implicit Behavior''' !'''Behavior in FW...

2009-08-28T20:34:04Z

New page: ==Implicit Behavioral Differences== The following table lists the implicit behavioral differences between FWSM and ASA. {| class="wikitable" |- !'''Implicit Behavior''' !'''Behavior in FW...

New page

==Implicit Behavioral Differences==
The following table lists the implicit behavioral differences between FWSM and ASA.
{| class="wikitable"
|-
!'''Implicit Behavior'''
!'''Behavior in FWSM'''
!'''Behavior in ASA'''
|-
| Implicit Deny
| Implicit deny between all interfaces.
| Implicit permit from high security to low security interfaces.
|-
| ICMP to-the-box deny
| Implicit ICMP deny to the interface.
| Implicit permit.
|-
| NAT matching for statistics
| Static NAT and static PAT (regular and policy '''static''' command) -- Best Match. In the case of overlapping address in the static statements, a warning is displayed, but they are supported. The order of static commands does not matter; the static statement that best matches the real address is used.
| Static NAT and static PAT (regular and policy '''static''' command) -- In order until the first match.
|-
|}