Hi!
I maked rule for SNMP protocol for GET and
response
Source: SNMP station management
Dest: SNMP agent
I write rule with permit any packet from SNMP
station (source) to SNMP agent with dwstination port 161.
I see the packet from source are permit but I see
also that the responses are blocked by firewall-1 with implicit
rule.
Why?
The responses not should be automatic permit with
rule above?
The response are permit only if I write a specific
rule from agent to station management on high destination port udp
(>1024)
Thank You
Maurizio
Cisco CNAP
|