About CaB

CaB · 08-09-2018

Hi,how do I enable the support for TFO (RFC 7413) in Cisco Adaptive Security Appliance Software Version 9.2 ?It seems not to work out of the box, i.e. normal connection establishment (handshake without application data bytes) works well while TFO (...

CaB · 08-09-2018

Question Hi, how do I enable the support for TFO (RFC 7413) in Cisco Adaptive Security Appliance Software Version 9.2 ? It seems not to work out of the box, i.e. normal connection establishment (handshake without application data bytes) works wel...

CaB · 02-18-2019

Hi patoberli, yes, I got it to work. Here are the code snippets: tcp-map tcp-map-fastopen synack-data allow tcp-options range 6 7 allow tcp-options range 9 255 allow You will need a class map to match the tcp stream: class-map TCP match po...

CaB · 08-10-2018

Hi Jerome, that was a very helpfull hint. I have started to modify the tcp normalization by allowing data in syn-acks. syn-ack allow As this did not fix the problem I configured the tcp map to be most liberal, i.e.: tcp-map tcp-map-test synack-dat...

Member Since	‎08-09-2018 04:40 AM
Date Last Visited	‎02-21-2019 02:07 AM
Posts	4
Total Helpful Votes Received	5

User Statistics

User Activity

How to support TCP Fast Open (RFC 7413) on ASA-Firewalls?

How to support TCP Fast Open (RFC 7413) on ASA-Firewalls?

Re: How to support TCP Fast Open (RFC 7413) on ASA-Firewalls?

Re: How to support TCP Fast Open (RFC 7413) on ASA-Firewalls?