What are the drawbacks of reflexive access lists?
Reflexive access lists do not work with some applications that use port numbers that change during a session. For example, if the port numbers for a return packet are different from the originating packet, the return packet will be denied, even if the packet is actually part of the same session. The TCP application of FTP is an example of an application with changing port numbers. With reflexive access lists, if you start an FTP request from within your network, the request will not complete. Instead, you must use Passive FTP when originating requests from within your network. This is where CBAC come to play since the CBAC is considered the more advanced firewall (stateful firewall). 2.
Related Questions
- Can the City disclose bidder’s lists/lists of plan holders for municipal projects to contractors, construction companies, agencies or other persons on request?
- If I audition for the chamber ensemble or professional lists but am not accepted, may I sing with Concert Singers of Cary at the symphonic choir level?
- What are the drawbacks of reflexive access lists?
