Skip to main content
sims
sims
Explorer II
August 10, 2020
Solved

Policy direction

  • August 10, 2020
  • 1 reply
  • 3565 views

Hi, Interface1 interface2

I have created the policy source is interface 1 and destination is interface 2

Why do I have to create a policy in reverse direction ( I mean source is interface 2 and destination is interface 1)

Thanks

 

    Best answer by James_G

    sims wrote:

     

     

    Why do I have to create a policy in reverse direction ( I mean source is interface 2 and destination is interface 1)

     

    Umm, you don't, unless you have sessions starting from interface 2

     

    Too little info here to help

    1 reply

    James_G
    James_GAnswer
    New Member
    August 10, 2020

    sims wrote:

     

     

    Why do I have to create a policy in reverse direction ( I mean source is interface 2 and destination is interface 1)

     

    Umm, you don't, unless you have sessions starting from interface 2

     

    Too little info here to help

    sims
    simsAuthor
    Explorer II
    August 12, 2020

    Hi,

    Sorry for the confusion . 

    My question was this client A from VLAN100 is accessing 443 on server A which is in VLAN 101,

    in that case do I need reverse policy from VLAN 101 to VLAN 100 

    sorry for my english 

    Thanks

     

     

     

     

     

    lobstercreed
    lobstercreed
    New Member
    August 12, 2020

    Of course not, as James said.  Unless the server A in VLAN 101 initiates connections to client A in VLAN 100, no policy in the reverse direction would be needed.  That's one of the most basic things that should be understood about stateful firewalls. 

     

    If you're defining stateless ACLs (like on a Cisco switch or something) then you need all that reverse stuff, but the whole point of firewalls is that they are far superior to that.

    Terms & ConditionsAccessibility statement