Re: Cisco ASA Firewall Inspect Commands

[John Sanders <jsanders () SULROSS EDU>]

We dropped the esmtp inspect statement.

--John S.

Beware of Phishing.
OIT will not ask you for your password in an email...ever.
--
John Sanders  * System Operations Group * Sul Ross State University
E Hwy 90, Alpine, TX  79832 * Tel 432-837-8421 * Mobile 432-294-0750
jsanders () sulross edu * http://www.sulross.edu/oit




Dennis Bohn wrote:
> Hello,
> We are upgrading our firewalls from PIX  to ASA (8.2 code).  Has anyone left the default 'inspect' commands in place? 
>  We are particularly concerned around 'inspect esmtp' and 'inspect dns.'  The old fixup smtp did not work for us, we 
> are wondering how the inspect esmtp command works (or not).   Did anyone try it and lose email?
>
> Though the HTTP inspect is not default, I am wondering if anyone has found it useful.  Are the regular expressions 
> being used to block certain URLs?
>
> Also welcome hearing about any issues with the ASA 8.x code train.
>
> TIA,
> dennis
>
>
> Dennis Bohn
> network manager
> 5168773327