Policy, traffic flow and the order of operations

16 min

More PCNSE questions come apart on the order of operations than on any single feature. If you can say, out loud and without hesitating, what the firewall does to a packet and in what order, a large block of the exam becomes straightforward. ## The sequence that matters Ingress and packet parsing, then session lookup. A packet matching an existing session skips policy evaluation entirely — this s...