Cisco - Zone Policy Actions (pass, inspect, drop, log) - What is the difference?
- by Jonathan Rioux
Have these commands for instance:
policy-map type inspect IN-OUT_PlcyMAP
class type inspect IN-OUT_ClassMAP
inspect <------
policy-map type inspect IN-OUT_PlcyMap
class type inspect IN-OUT_ClassMAP
pass <------
zone security INSIDE
zone security OUTSIDE
zone-pair security IN->OUT source INSIDE destination OUTSIDE
service-policy type inspect IN-OUT_PlcyMAP
What is the difference between "inspect", "pass", "drop", "log", and "reset ?
I could not found any information on this on Google.
