doubt with access-list in Firewalls

From: ciscosec sec (cciesecurityccie@gmail.com)
Date: Sat Jun 28 2008 - 05:43:56 ART

Hello Group,

I just had a doubt. In the labs is it ok to configure the access-list
on Firewalls with any any.

For eg if i were to configure IPSEC between 2 devices with the
Firewall in between,
can i configure the ASA as follows:
access-list outside permit esp any any
access-list outside permit upd any any eq isakmp

or do we need to specify the exact hosts in the access list.

Regards,
raul

This archive was generated by hypermail 2.1.4 : Tue Jul 01 2008 - 06:23:23 ART