https://community.cisco.com/t5/network-security/access-list/m-p/2973736#M150380 <P>Hi <A href="https://supportforums.cisco.com/users/com-oneaustria" title="View user profile.">Raimund Schimanovits</A><SPAN>, </SPAN>Only for ICMP, if you match correctly source and destination on the ACL, this should work. Also, you can check with packet tracer if traffic is matching with ACL.</P> <P></P> <P>Regards.-</P> Wed, 31 Aug 2016 14:08:24 GMT Matias Ortiz 2016-08-31T14:08:24Z https://community.cisco.com/t5/network-security/access-list/m-p/2973733#M150377 <P>I have a cisco ASA 5506-X and want to ping two host. One on the outside interface and one on the inside interface</P> <P>When i create an access list and appy to it the deny icmp action did not work. The running ping is still ok.</P> <P>When i stop the ping and restart it after few seconds the asa blocks the icmp.&nbsp;</P> <P></P> <P>Why did the access list not work after i appy to it?&nbsp; Only after few seconds and a restart?</P> <P></P> <P>Thanks</P> <P></P> <P></P> <P></P> Tue, 12 Mar 2019 08:12:20 GMT https://community.cisco.com/t5/network-security/access-list/m-p/2973733#M150377 Raimund Schimanovits 2019-03-12T08:12:20Z https://community.cisco.com/t5/network-security/access-list/m-p/2973734#M150378 <P></P> <P><SPAN class="fullname" itemprop="author">Hello&nbsp;<A href="https://supportforums.cisco.com/users/com-oneaustria" title="View user profile." class="username" lang="" about="/users/com-oneaustria" typeof="sioc:UserAccount" property="foaf:name" datatype="">Raimund Schimanovits</A>, you should verify if you must enable ICMP inspection.</SPAN></P> Tue, 30 Aug 2016 15:00:47 GMT https://community.cisco.com/t5/network-security/access-list/m-p/2973734#M150378 Matias Ortiz 2016-08-30T15:00:47Z https://community.cisco.com/t5/network-security/access-list/m-p/2973735#M150379 <P>Is this only for ICMP or should i always inspect to block a traffic for other ports?</P> Wed, 31 Aug 2016 08:29:20 GMT https://community.cisco.com/t5/network-security/access-list/m-p/2973735#M150379 Raimund Schimanovits 2016-08-31T08:29:20Z https://community.cisco.com/t5/network-security/access-list/m-p/2973736#M150380 <P>Hi <A href="https://supportforums.cisco.com/users/com-oneaustria" title="View user profile.">Raimund Schimanovits</A><SPAN>, </SPAN>Only for ICMP, if you match correctly source and destination on the ACL, this should work. Also, you can check with packet tracer if traffic is matching with ACL.</P> <P></P> <P>Regards.-</P> Wed, 31 Aug 2016 14:08:24 GMT https://community.cisco.com/t5/network-security/access-list/m-p/2973736#M150380 Matias Ortiz 2016-08-31T14:08:24Z