New Member

Solved

TCP State Bypass for a source

Forum|Forum|9 years ago
June 13, 2017
1 reply
10210 views

Dears,

I want to disable tcp state by-pass for a particular source and destination as per below link of cisco, how we can do in fortigate.

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/118995-configure-asa-00.html#anc7

Thanks

Best answer by emnoc

not doable by per src/dst but globally.

config system settings set asymroute en end

But now you have no statefull session tracking

Ken

New Member

I am not sure but there are quite a few settings in the cli in #config firewall policy

when you edit a policy do a # show full

hope that helps

emnocAnswer

New Member

not doable by per src/dst but globally.

config system settings set asymroute en end

But now you have no statefull session tracking

Ken

sonydarrelAuthor

New Member

Thanks for the experts reply

once we enable that then the firewall will be like a router which is stateless for every session, so this means it is not doable in fortigate.

awaiting your confirmation to mark rating for the thread