Don't wanna be here? Send us removal request.
Text
Setting firewall mode
Q What is the default firewall mode on ASA
A Routed
Q What happen when we change firewall mode on ASA A ASA clears running configuration ASDM, CLI or SSH Session to ASA would be disconneted
Q What is the command to set firewall mode to transparent A firewall transparent Such as ciscoasa(config)#firewall transparent
Q How can we change firewall mode to default mode or routed mode A Use no keyword such as ciscoasa(config)#no firewall transparent
0 notes
Text
Traffic flow in Transparent firewall mode
Q What is the default state for traffic moving from higher security interface to lower security interface
A By default, traffic is allowed
Q What is the default state for traffic moving from lower security interface to higher security interface A Blocked or not allowed
Q Which traffic is allowed in both direction by default A ARP traffic or managment traffic
Q Which traffic is inspected by default A TCP and UDP
Q How can we controll ARP traffic A Using ARP Inspection
Q How can we allow traffic from lower security interface to higher security interface A Using ACL or extended access list on low security interface
0 notes
Text
Transparent firewall mode
Q How ASA behaves in transparent mode A As a Layer 2 firewall
Q What are the other names given to transparent mode A "Bump in the wire" or Stealth Firewall"
Q Does transparent firewall seen as a router hop A No
Q What are the features of transparent mode A Connects same network on inside and outside interface We can easily introduced firewall into existing network Inside and outside interfaces belongs to same subnet No need to configure IP address on the interfaces
0 notes
Text
Routed Mode
Q Which are the two firewall mode supported by Cisco ASA A Routed and Transparent
Q What is the default firewall mode for Cisco ASA A Routed
Q How ASA behaves in routed mode A As a router hop in the network
Q What are the features of routed mode A Support many interfaces Each interface require IP address Each interface belongs to different subnet We can share interfaces between contexts
Q Which routing protocols supported in routed mode A Dynamic routing protocols such as RIP, EIGRP or OSPF
0 notes