ASA order of operatgions

[icecream-guy]

Anyone have any pretty pictures of the ASA order of operations (not the NAT one)  <= 8.2 and >= 8.3?

[deanwebb]

Would something from the CCNP-Firewall (circa 2013, old CCNP-Security version) book be what you're looking for? If so, I can hunt through it for stuff like that.

[mlan]

@ristau - Stepping through the packet tracer GUI output might also inform the discussion.

[Dieselboy]

Is this any good?

[Dieselboy]

Also worth noting that the firewall policy map is a compound match. Meaning, if it matches multiple lines, it then applies the rules applicable to all lines. It's not like an ACL where it matches the first "match" and that's the end. It goes from top to bottom and works out all of the matches and then applies all of the rules it matches against.

[dlots]

Is this any good?

I would say yes, that is quite helpful :-D