Velocity Reviews - Computer Hardware Reviews

Velocity Reviews > Newsgroups > Computing > Cisco > silly question

Reply
Thread Tools

silly question

 
 
jason
Guest
Posts: n/a
 
      07-28-2005
forgive the extremely simple question, it's been about 8 years since
i've configured a PIX acl ruleset.

is there a built-in default deny for all traffic between all hosts, or
do you need to add that rule yourself?

 
Reply With Quote
 
 
 
 
Walter Roberson
Guest
Posts: n/a
 
      07-28-2005
In article <(E-Mail Removed) .com>,
jason <(E-Mail Removed)> wrote:
:forgive the extremely simple question, it's been about 8 years since
:i've configured a PIX acl ruleset.

:is there a built-in default deny for all traffic between all hosts, or
:do you need to add that rule yourself?

In PIX 5.x, 6.x, the default is to deny all new flows from
a lower security level to a higher security level.

In PIX 5.x, 6.x, there is no way to allow flows between two interfaces
at the same security level.

In PIX 5.x, 6.x, if an interface has no access-group applied to it,
then the default is to allow all new flows to lower security levels.
However, as soon as an access-group is applied to it, the default
changes to implicitly deny any new flows which are not explicitly permitted.
--
This signature intentionally left... Oh, darn!
 
Reply With Quote
 
 
 
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
silly question - what is" Firefox 1.6 alpha 1" ? false-name@false-account.net Firefox 3 09-17-2005 06:49 AM
Silly question about Wi-Fi Lance Wireless Networking 3 09-13-2004 02:57 PM
Silly Cisco question of the day bolt thrower Cisco 2 10-23-2003 06:29 PM
Silly question.... Don VHDL 2 09-26-2003 11:38 AM
Need to move up a directory...silly question John Perl 2 09-25-2003 04:25 PM



Advertisments