as far as i know, the asg counts all hosts which are going through the firewall expecting the ones on the lan with the gateway. is that true?
(didn´t find a public document...)
the reason for my question is:
in my network the firewall protects a dmz with public /26 network and three private networks, but not filled up to their limit with hosts (especially the dmz network). in the active ip addresses scope list you can see many ip´s from dmz doesn´t exist?!
seems to me like the asg counts every request to an protected ip without checking if the host exists or not?!
(there isn´t any entry in the arp table for that nonexisting host and tcpdump shows up an 'who has' from the firewall interface without an answer)
any clues? thx
This thread was automatically locked due to age.
