An Inside User Visits A Web Server; Figure; Www.example.com; Management Ip - Cisco ASA 5505 Configuration Manual

Chapter 5 Configuring the Transparent or Routed Firewall

An Inside User Visits a Web Server

Figure 5-8

Figure 5-8
The following steps describe how data moves through the adaptive security appliance (see
1.
2.
3.
4.
5.
6.
OL-20339-01
shows an inside user accessing an outside web server.
Inside to Outside

www.example.com

Internet
209.165.201.2
The user on the inside network requests a web page from www.example.com.
The adaptive security appliance receives the packet and adds the source MAC address to the MAC
address table, if required. Because it is a new session, it verifies that the packet is allowed according
to the terms of the security policy (access lists, filters, AAA).
For multiple context mode, the adaptive security appliance first classifies the packet according to a
unique interface.
The adaptive security appliance records that a session is established.
If the destination MAC address is in its table, the adaptive security appliance forwards the packet
out of the outside interface. The destination MAC address is that of the upstream router,
209.186.201.2.
If the destination MAC address is not in the adaptive security appliance table, the adaptive security
appliance attempts to discover the MAC address by sending an ARP request and a ping. The first
packet is dropped.
The web server responds to the request; because the session is already established, the packet
bypasses the many lookups associated with a new connection.
The adaptive security appliance forwards the packet to the inside user.

Management IP

209.165.201.6

Host

209.165.201.3
Cisco ASA 5500 Series Configuration Guide using ASDM
Firewall Mode Examples
Figure 5-8):
5-21