Hi,
I recently had to deal with a bunch of Gaming Consoles (PS5 + Xbox) in a network. In the past I always go the UPnP route for them to get their "NAT Type 2" (open nat) achieved. Recently we had them sitting on to 1000 Series Cisco ASA with a standard NAT. No UPnP and I was a bit surprised why and how Cisco manage that all the consoles can achieve NAT Type 2 without upnp.
Normally when the console request a fixed port to test the nat capability and is not flexible with that. So external port rewriting not working. This is where UPnP steps in and rewrite. But on the ASA Configuration was nothing else then the default cisco NAT involved and it was flawless.
Anybody with more Cisco experience than I can shine some light on that for me?
thanks
Hey, that were exavyomy thoughts after reading it. Let's speak more clear.
A group use the protocol to setup a Plattform to distribute illegal stuff, child porn, drug marketplace, Warez...
Sure it might be the "bad protocol" I news and people / industry is trying to blame and block it. But because of the decentralized structuring like the onion net it is hard to.
Another aspect which should be thought about is government in repressive countries. Iran, North Korea, China, Russia... Name it.
You could block the protocol but how could it be by design setup to make it actually hard for NGFW to just recognize the package by header and filter it. Didn't check in detail but hope the implement some mechanics to make this hard.