Kings,
Even though the connection is initiated from the outside, it is still has the inspect ftp applied. This is true unless it has been disabled or configured in a way that the inspect is out of scope for the initial packet. Return traffic that is first initiated from the outside is also handled just like traffic that is initiated from the inside. A session is created and used to provide the integrity and the bypass of any acl's. _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
