An Outside User Attempts To Access An Inside Host - Cisco 7604 Configuration Manual

Catalyst 6500 series switch and cisco 7600 series router firewall services module configuration guide using the cli

Hide thumbs Also See for 7604:

Table of Contents

Configuring the Firewall Mode

The following steps describe how data moves through the FWSM (see

An Outside User Attempts to Access an Inside Host

Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM

A user on the inside network requests a web page from the DMZ web server using the destination

address of 10.1.1.3.

The FWSM receives the packet and because it is a new session, the FWSM verifies that the packet

is allowed according to the terms of the security policy (access lists, filters, AAA).

For multiple context mode, the FWSM first classifies the packet according to either a unique

interface or a unique destination address associated with a context; the destination address is

associated by matching an address translation in a context. In this case, the interface is unique; the

web server IP address does not have a current address translation.

The FWSM then records that a session is established and forwards the packet out of the DMZ

When the DMZ web server responds to the request, the packet goes through the fast path, which lets

the packet bypass the many lookups associated with a new connection.

The FWSM forwards the packet to the inside user.

shows an outside user attempting to access the inside network.

Outside to Inside

www.example.com

209.165.201.2

Routed Mode Overview

Show Quick Links

Table of Contents