How to make tcp have establish option's function or reflexive in ASA like icmp have echo reply

how to make tcp have establish option's function or reflexive in ASA like icmp have echo reply
rather than permit tcp in both side

An ASA firewall is stateful.
The reflexive access for TCP connections (or UDP flows) is allowed by default as the firewall checks for established connections prior to applying an access-list on traffic that arrives at an interface.
Excerpted from this document (emphasis mine):
"Here are the individual steps in detail:
Packet is reached at the ingress interface.
Once the packet reaches the internal buffer of the interface, the input counter of the interface is incremented by one.
Cisco ASA will first verify if this is an existing connection by looking at its internal connection table details. If the packet flow matches an existing connection, then the access-control list (ACL) check is bypassed, and the packet is moved forward.
If packet flow does not match an existing connection, then TCP state is verified. If it is a SYN packet or UDP packet, then the connection counter is incremented by one and the packet is sent for an ACL check. If it is not a SYN packet, the packet is dropped and the event is logged."

Similar Messages

  • How to make Add to Favorites Option for website?

    Please Advice how to make Add to Favorites Option for the
    Website.
    Appreciated
    Thank You

    http://www.adobe.com/cfusion/webforums/forum/messageview.cfm?forumid=12&catid=189&threadid =1191543&highlight_key=y&keyword1=favorites

  • I have a subscription installed on a Macbook and I like to have it on my new Macbook Air. How to move my subscribtion?

    I have a subscription installed on a Macbook and I like to have it on my new Macbook Air. How to move my subscribtion?

    If you registered the product then it should be in My Software in when you sign into Adobe.com with your Adobe ID.

  • How can I customize the navigation bar in Firefox 29? I would like to have the refresh/stop button back in front of the navigation bar!

    How can I customize the navigation bar in Firefox 29? I would like to have the refresh/stop button back in front of the navigation bar!

    There isn't a built in way to do that since all the navigation toolbars are on one toolbar.
    You can restore this functionality by installing the Classic Theme Restorer add-on
    *https://addons.mozilla.org/en-US/firefox/addon/classicthemerestorer/

  • HT4743 Have purchased a movie on apple TV and would like to have the movie available to my ipod and computer but am unable to see it in my ipod/computer library.  Movies bought from itunes via the computer can be played on both apple TV and the ipod.

    Have bought a movie via apple TV and would like to have it available on my computer and ipod but it doesn't appear in the library on either.  If I purchase a move from itunes via the computer it's available on both my ipod and apple TV.  Can anyone help?

    Simply download the content on the computer from the purchase history.
    Downloading past purchases from iTunes.

  • I m not able to sign in in itunes cuz i dont have a  credit or debit card.so how to make id without payment option

    i wnat to know that how to make apple id without credit or debit card....cuz i dont have....but i want to download apps for my ipod touch

    Create a NEW account using these instructions. Make sure you follow the instructions. Many do not and if you do not you will not get the None option. You must use an email address that you have not used with Apple before.
    Creating an iTunes Store, App Store, iBookstore, and Mac App Store account without a credit card

  • How to make Start Date as optional parameter in Crystal reports 2011

    Hi All,
    I have existing Start Date and End Date parameter how to make them as optional parameters.
    Thanks for your help in advance!!.

    Hi Mnnica,
    There is an option 'Optional Prompt' under value options, make that as true.  Do the same for both startdate and enddate then go in Record Selection Formula and write below formula :
    If Not (hasvalue({?Startdate}) then True else {?Startdate} >= {databasedatefield}
    and
    If Not (hasvalue({?Enddate}) then True else {?Enddate} <= {databasedatefield}
    Check below screen capture for Optional Prompt options :
    -Sastry

  • HT1153 I turned my macbook off maanually last night.  Magic mouse was working fine.  When I turned ir back on the mouse did not work.  I do not have the option of Bluetooth in my system preferences.  I have no  idea how to resolve this problem.

    I turned my macbook off manually last night.  Magic mouse was working fine.  When I turned it back on it wasn't working.  I have no option in system preferences for Bluetooth.  I have no clue how to get it working again.  The batteries in the mouse are working fine.

    Try resetting the SMC.
    Barry

  • How to make DM mpackage Prompt OPTIONAL

    Hi All
    I want to run my DM package which has only profit center as the prompt. User want to see the prompt but dont want to enter anything but just say next so that it runs for all profit centers.
    I am using
    PROMPT(SELECTINPUT,,,,"%ENTITY_DIM%") in my script logic editor. How to make the prompt optional. When i am trying to run it gives me a message to "SELECT FEWER MEMBERS".
    And one more point : What is the difference between SELECTINPUT and SELECT.
    PROMPT(SELECTINPUT, [variable], [second variable], [label], [dimensions])
    PROMPT(SELECT, [variable], [second variable], [label], [dimensions])
    Thanks in advance for your inputs.
    Regards
    AK

    Hi,
    To make the user to execute the package without Prompt you can remove the script,
    PROMPT(SELECTINPUT,,,,"%ENTITY_DIM%")
    From Dynamic Script of your package.
    Regarding your second question,
    SELECTINPUT and SELECT both are to get input from user through Prompt.They Differ by the following,
    In SELECTINPUT You will get only the Base members of the dimension to select.
    In SELECT you get both Base and Parent Members of the dimension to select.
    Hope this helps,
    Regards,
    G.Vijaya Kumar

  • How to make a dvd with audio track after exporting using media encoder? I have 2 seperate files??

    Hello,
    I need to just burn a video I finished. It's a m2v file and so I have a AC3 audio tack and a video track. I thought I was good to go, but I cannot figure out how to burn the audio and the video to the same disk! This is very annoying as the settings I have to use for export to keep video quality will give me 2 seperate files.
    So, what programs do you use or recommend that allow me to add an audio track? I don't want people to have the option of switching between tracks I just want a normal track like you have when watching a movie, I mean it just plays by default.
    Thanks in adv.
    Mark

    The caveats that I would issue to others are:
    1.) muxed Assets often work fine, but can cause problems. Properly spec'ed. elemental streams seem to never cause problems.
    2.) Encore will allow one to populate a Timeline with multiple Assets. However, it can get very confused in some cases. One is where an Audio Clip is just an Audio Unit, or two, too long, and one has a tiny gap, between their Videos. Using one Timeline per Sequence will always work, so long as the Assets are properly spec'ed.
    I'm not saying that either of these WILL cause problems. Many do similar with zero issues. However, there is the potential for problems. Just use with care.
    Good luck,
    Hunt

  • How to make Plant as an optional field in ME21N

    Dear Experts,
    Is it possible to make plant as an optional field while creating a PO(me21n)? If so then please suggest the T-code and procedure.
    Thanks and Regards,
    Manish

    Dear All,
    I completely agree to all of you that Plant is mandatory, but since I am procuring with reference to WBS element, plant is already picked up. I am trying to avoid the error of assigning 2 plants to same PO.
    Please advise,
    Thanks and Regards,
    Manish

  • How to make field MRP controller optional in Cj20n

    Hi All,
    Please help to make field MRP controller optional in CJ20n
    Cheers,
    Nies

    Hi ,
    we can create a dummy MRP in system and assigne it to the required project profile so that system will not ask u to make this entry. As per my knowledge Mandetory MRP is system requirement we cant by pass it.
    Rgds

  • How to make the UoM field optional field

    In material master Basic data1 tab, I want to make UoM field optional field. In OMS9, I changed this field from Req,field to Opt field
    ,but when i create a material, the UoM is still Req. How to resolve this? Thank you.

    Hi,
    Unit of measurement is the mandatory field for the materials.Without a unit we can't do anything for the material. Even though u changed as a optional entry system will insist to enter the UOM. Because its a standard process in SAP.Same thing will be happend for the material Description also.Field reference will not control such fields like UOM and material Description etc...
    Regards,
    Venkatesh

  • How to make input parameters as optional in the function definition

    I have created a function for a data service which is at the Normalized layer and has 3 input parameters.
    This function is called at the Integration layer in which we have to pass only one parameter. But for the remaning 2 parameters it is throwing an error as we cannot pass those parameters.
    Is it possible that we can pass less number of parameters in the higher layer.
    I had also made those parameters as optional in the function definition(by applying '?' while defining the arguments-e.g. $x as xs:string?), but error was thrown while generating the query plan.
    I have attached a Demo project, in which i have defined a function at the normalized layer and this function is been called at the integration layer.
    Thanks,
    Kinjal

    Thanks mreiche for the reply
    But the problem is that while writing
    function myfunction( arg1 as xs:string, $arg2 as xs:string?) { ... }
    in function definition in the normalized layer, the query plan is throwing following error:-
    com.bea.ld.QueryException: Cannot generate XQuery for the function {ld:DemoProject/Normalized/TestGeo}getGeo:3
    at weblogic.rjvm.BasicOutboundRequest.sendReceive(BasicOutboundRequest.java:108) at weblogic.rmi.cluster.ReplicaAwareRemoteRef.invoke(ReplicaAwareRemoteRef.java:290)
    at weblogic.rmi.cluster.ReplicaAwareRemoteRef.invoke(ReplicaAwareRemoteRef.java:248) at com.bea.ld.Server_ydm4ie_EOImpl_816_WLStub.executeFunction(Unknown Source)     at workshop.liquiddata.xds.views.queryplan.QueryPlanPanel.compileFunction(QueryPlanPanel.java:583) at workshop.liquiddata.xds.views.queryplan.QueryPlanPanel.access$900(QueryPlanPanel.java:39) at workshop.liquiddata.xds.views.queryplan.QueryPlanPanel$5.run(QueryPlanPanel.java:469) at java.lang.Thread.run(Thread.java:534)
    Caused by: com.bea.ld.QueryException: Cannot generate XQuery for the function {ld:DemoProject/Normalized/TestGeo}getGeo:3 at com.bea.ld.EJBRequestHandler.invokeFunction(EJBRequestHandler.java:720) at com.bea.ld.EJBRequestHandler.executeFunction(EJBRequestHandler.java:339) at com.bea.ld.ServerBean.executeFunction(ServerBean.java:95) at com.bea.ld.Server_ydm4ie_EOImpl.executeFunction(Server_ydm4ie_EOImpl.java:312)
    at com.bea.ld.Server_ydm4ie_EOImpl_WLSkel.invoke(Unknown Source)
    at weblogic.rmi.internal.BasicServerRef.invoke(BasicServerRef.java:491)
    at weblogic.rmi.cluster.ReplicaAwareServerRef.invoke(ReplicaAwareServerRef.java:120)
    at weblogic.rmi.internal.BasicServerRef$1.run(BasicServerRef.java:434)
    at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:363)
    at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:147)
    at weblogic.rmi.internal.BasicServerRef.handleRequest(BasicServerRef.java:429)
    at weblogic.rmi.internal.BasicExecuteRequest.execute(BasicExecuteRequest.java:35)
    at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:224)
    at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:183)
    Caused by: com.bea.ld.server.FunctionCallQueryBuilder$QueryBuilderException: The following parameter type is not supported: {http://www.w3.org/2001/XMLSchema}string?
    at com.bea.ld.server.FunctionCallQueryBuilder.addParameter(FunctionCallQueryBuilder.java:257)
    at com.bea.ld.server.FunctionCallQueryBuilder.buildQuery(FunctionCallQueryBuilder.java:99)
    at com.bea.ld.EJBRequestHandler.invokeFunction(EJBRequestHandler.java:716)
    But no error is thrown when I call this function at the Integration layer,using
    for $f in mfunction( 'test', () )
    and the output which i get is as expected.

  • I have no options under my privacy tab and would like to be able to clear the cookies to make my games work better.

    When I go under options I can select all of the options except the privacy tab. It doesn't open. Whichever tab I looked at previously is still there. Nothing about cookies.

    Start Firefox in <u>[[Safe Mode]]</u> to check if one of the extensions or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox (Tools) > Add-ons > Appearance/Themes).
    *Don't make any changes on the Safe mode start window.
    *https://support.mozilla.com/kb/Safe+Mode
    *https://support.mozilla.com/kb/Troubleshooting+extensions+and+themes

Maybe you are looking for

  • "Error while printing"-  more info on

    I forgot to mention it's MacOSX 10.3.9; printer is Deskjet 2360. (This printer uses up a lot of cartridges! Guess that's their profit margin.) Concurrently I have message: "Startup disk almost full; need to delete files." Another problem! But, I stil

  • I dont want to set my iphone up as a new phone, but i dont want to restore from my previous phone. help!

    I bought a new iPhone 5 a few months ago, and havnet plugged it into my itunes until now, and I do not want to set it up as a new phone, because it will get rid of everything I already have on there, but I also dont want to restore from my last backu

  • Automatic login in mavericks not working. I still have to enter user name and password

    I upgraded the original Hard Drive to SSD drive.  After the upgrade, I can no longer automatically log in.  I now have to enter my user name and password.  I tried resetting automatic login in Users and Groups but it doesn't work in Mavericks.

  • Https with tomcat-page cannot be displayed error

    Hi, when trying to connect using https browser displays page cannot be displayed message I've created a self-signed certificate using the keytool program. I've uncommented the connecter element for port 8443 in the server.xml file. I'm using jdk1.6 a

  • FD31/FD32/FD33

    Hi Gurus,              Could any one let me know what is the logic used to calculate arrear in FD31/FD32/FD33 transactions.How arrear is calculated  in these transactions. Regards, Ashok...