<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic ASA ACL Problems in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/asa-acl-problems/m-p/635415#M422740</link>
    <description>&lt;P&gt;I have several new ASA-5520 boxes. All are configured with version 7.06 (Cisco recomendation) and in active/standby configuration.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;The problem is that the ACLs seem to disapear. For example; I have an outside access list that have about 20 lines. Every once in a while the ACL will start blocking traffic that is permitted by the ACL. When I do a 'sh access-list outside' it says that there are only two elements. They are there when I look at the running config. If I wait a while they start to work again and show up as 'active elements' again. I can force a failover and failback to fix it or restart the firewall. I will open a TAC case on Monday. I was hoping that maybe someone has seen this and has a quick solution.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Patrick&lt;/P&gt;</description>
    <pubDate>Fri, 21 Feb 2020 09:17:58 GMT</pubDate>
    <dc:creator>pbrown</dc:creator>
    <dc:date>2020-02-21T09:17:58Z</dc:date>
    <item>
      <title>ASA ACL Problems</title>
      <link>https://community.cisco.com/t5/network-security/asa-acl-problems/m-p/635415#M422740</link>
      <description>&lt;P&gt;I have several new ASA-5520 boxes. All are configured with version 7.06 (Cisco recomendation) and in active/standby configuration.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;The problem is that the ACLs seem to disapear. For example; I have an outside access list that have about 20 lines. Every once in a while the ACL will start blocking traffic that is permitted by the ACL. When I do a 'sh access-list outside' it says that there are only two elements. They are there when I look at the running config. If I wait a while they start to work again and show up as 'active elements' again. I can force a failover and failback to fix it or restart the firewall. I will open a TAC case on Monday. I was hoping that maybe someone has seen this and has a quick solution.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Thanks,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Patrick&lt;/P&gt;</description>
      <pubDate>Fri, 21 Feb 2020 09:17:58 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/asa-acl-problems/m-p/635415#M422740</guid>
      <dc:creator>pbrown</dc:creator>
      <dc:date>2020-02-21T09:17:58Z</dc:date>
    </item>
    <item>
      <title>Re: ASA ACL Problems</title>
      <link>https://community.cisco.com/t5/network-security/asa-acl-problems/m-p/635416#M422741</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;could you provide the show running-config?&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Wed, 15 Nov 2006 18:15:56 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/asa-acl-problems/m-p/635416#M422741</guid>
      <dc:creator>sbilgi</dc:creator>
      <dc:date>2006-11-15T18:15:56Z</dc:date>
    </item>
  </channel>
</rss>

