topic Access Control Policy Rule in Network Security

Access Control Policy Rule

benolyndav — Mon, 20 Dec 2021 17:46:59 GMT

So hope ive been getting this right if i want to block traffic to and from the same addresses I creat a rule it would be as the below

source ANY destination ANY source networks 23.33.44.55 destination networks 22.33.44.55 Source ports Any Dest ports ANY

and block with reset

Rob Ingram — Mon, 20 Dec 2021 17:52:55 GMT

@benolyndav You'd need 2 rules, 1 from "any" to 22.33.44.55 block with reset and another from 22.33.44.55 to "any" block with reset.

benolyndav — Mon, 20 Dec 2021 19:01:26 GMT

Hi Rob

Thanks

Traffic the other way would be blocked anyway unless explicitly allowed from Outside to inside so is the 2nd rule even needed?

Thanks

Rob Ingram — Mon, 20 Dec 2021 19:06:09 GMT

Hi @benolyndav sure if you've an explict or implict deny rule at the bottom of the ACP from outside to inside, then yes it would not be needed.