asa access rules question....

desrochj1 — Mon, 11 Mar 2019 20:51:22 GMT

Hello,

I am doing rules between interfaces on a ASA 5520.

I need to change the rules on a regular basis (weekly).

if i suddenly add a " deny rule " on an interface, it seems

that tcp connections made before applying the rule are
not suddenly killed by the rule. Only new connection attempts are

dropped by the rule.

When applying a new rule, is there a way to kill already connected

tcp connections ? even if the rule denies it

Anu M Chacko — Mon, 27 Jun 2011 15:07:53 GMT

Hi,

You can issue a "clear conn" to clear all previous connections.

Hope this helps!

Regards,

Anu

P.S. Please mark this question as resolved if it has been answered. Do rate helpful posts.

topic asa access rules question.... in Network Security