permit same-security-traffic

I have found on the internet an article which describes how to enable traffic to enter and exit the same interface. The command is

hostname(config)# same-security-traffic permit intra-interface

I have four follow up questions:

1. Why is this disabled by default on the Cisco ASA?
2. What is the danger of enabling it?
3. Is it disabled by default on the PIX firewalls as well?
4. Is there a way to enable this behavior only on a specific interface or is this a global setting for all physical interfaces?

Thank you.

Regards, AL

read more and respond »

Posted 5 years ago by aleu in Cisco Systems

Report misuse