Cisco Systems ASA 5580 Manual De Usuario

See the following commands for this example:

ciscoasa(config)# access-list OUTSIDE extended permit tcp host 10.1.1.14 

ciscoasa(config)# access-list OUTSIDE extended permit tcp host 10.1.2.67 

ciscoasa(config)# access-list OUTSIDE extended permit tcp host 10.1.3.34 

ciscoasa(config)# access-group OUTSIDE out interface outside

The ASA rule-engine supports a new feature for rule updation called the Transactional-Commit Model. 
When this feature is enabled, a rule update is applied after the rule compilation is completed; without 
affecting the rule matching performance. With the legacy model, rule updates take effect immediately 
but rule matching slows down during the rule compilation period. This feature is useful to prevent 
potential packet drops during large compilation of rules under high traffic conditions. This feature is also 
useful to reduce the rule compilation time under two specific patterns of configurations:

Preventing packet drops while compiling large rules during high traffic rates.

Reducing rule compilation time while updating a large number of similar rules.

Supported in single and multiple context mode.

Web Server:

Inside

HR

Eng

Outside

Static NAT

Static NAT

Static NAT

ACL Outbound

ACL Inbound

ACL Inbound

ACL Inbound

3338

2

3