https://community.cisco.com/t5/network-security/asa-block-existing-connection/m-p/2544342#M235109 <P>Right now I have a rule that allows ICA connections for citrix. &nbsp;We would like to have the ability to stop new connections but not terminate existing ones immediately. &nbsp;If I disable the permit will it terminate all the existing entries in the conn table and kill the active&nbsp;sessions?&nbsp;</P> Tue, 12 Mar 2019 04:42:03 GMT jmattbullen 2019-03-12T04:42:03Z https://community.cisco.com/t5/network-security/asa-block-existing-connection/m-p/2544342#M235109 <P>Right now I have a rule that allows ICA connections for citrix. &nbsp;We would like to have the ability to stop new connections but not terminate existing ones immediately. &nbsp;If I disable the permit will it terminate all the existing entries in the conn table and kill the active&nbsp;sessions?&nbsp;</P> Tue, 12 Mar 2019 04:42:03 GMT https://community.cisco.com/t5/network-security/asa-block-existing-connection/m-p/2544342#M235109 jmattbullen 2019-03-12T04:42:03Z https://community.cisco.com/t5/network-security/asa-block-existing-connection/m-p/2544343#M235117 <P>You can change the ACL as you want and your existing connections stay as they are. ACL-entries are only evaluated for new connections.</P> Tue, 02 Sep 2014 19:56:53 GMT https://community.cisco.com/t5/network-security/asa-block-existing-connection/m-p/2544343#M235117 Karsten Iwen 2014-09-02T19:56:53Z