Cisco ASA 5505 Configuration Manual page 1050

Licensing Requirements for Connection Settings
in the fast path for the connection, and the packets are dropped.
routing example where the outbound traffic goes through a different adaptive security appliance than the
inbound traffic:
Figure 48-1
If you have asymmetric routing configured on upstream routers, and traffic alternates between two
adaptive security appliances, then you can configure TCP state bypass for specific traffic. TCP state
bypass alters the way sessions are established in the fast path and disables the fast path checks. This
feature treats TCP traffic much as it treats a UDP connection: when a non-SYN packet matching the
specified networks enters the adaptive security appliance, and there is not an fast path entry, then the
packet goes through the session management path to establish the connection in the fast path. Once in
the fast path, the traffic bypasses the fast path checks.
Licensing Requirements for Connection Settings
Model License Requirement
All models Base License.
Guidelines and Limitations
This section includes the following guidelines and limitations:
•
Cisco ASA 5500 Series Configuration Guide using ASDM
48-4
Asymmetric Routing
ISP A
Security
appliance 1
Outbound?Traffic
Return?Traffic
TCP State Bypass Guidelines and Limitations, page 48-5
ISP B
Security
appliance 2
Inside
network
Chapter 48 Configuring Connection Settings
Figure 48-1 shows an asymmetric
OL-20339-01