Santos:CCNA Sec 210-260 OCG

Packet Filtering on the ASA

We discussed the default flow of traffic, which allows initial traffic to flow from higher to lower security levels, and we also discussed why the reply traffic is allowed (because of the stateful filtering and the database created from the initial traffic flow). But what about individuals on the outside who need access to your web server on the DMZ? You need to allow that initial traffic if you want the customer to have access. To provide access, you can implement packet filtering ACLs on the interfaces. These work just like IOS router ACLs; there are both standard and extended lists, and they can be applied inbound and outbound to a given interface.

The word inbound, from a firewall perspective, could mean traffic ...