https://community.cisco.com/t5/network-security/asa-access-rule-issue/m-p/3801703#M7002 <P>can you please add the full config so this can be analysed,</P> Thu, 14 Feb 2019 10:35:39 GMT Dennis Mink 2019-02-14T10:35:39Z https://community.cisco.com/t5/network-security/asa-access-rule-issue/m-p/3801631#M6998 <P>I am facing difficulty implementing access rule in ASASM. The rule does not catch traffic. If I permit ip any to any it allows the traffic</P> <P>&nbsp;</P> <P>I have attached the packet trace. The first rule below is my more specific rule.</P> <P>Also the items in two packet traces are different.</P> <P>&nbsp;</P> <OL> <LI>access-list outside_access_in extended permit ip object-group NET_ALL-DAB-DEPT object SVR_QestionBank</LI> <LI>access-list outside_access_in extended permit&nbsp;ip any any</LI> </OL> <P>&nbsp;</P> <P>we are not using any NAT.&nbsp;</P> <P>Key configuration are</P> <P>1) security ACL</P> <P>2) TCP state bypass for some subnets</P> <P>Any idea what could be the reason?</P> Fri, 21 Feb 2020 16:48:53 GMT https://community.cisco.com/t5/network-security/asa-access-rule-issue/m-p/3801631#M6998 Hirak Debnath 2020-02-21T16:48:53Z https://community.cisco.com/t5/network-security/asa-access-rule-issue/m-p/3801703#M7002 <P>can you please add the full config so this can be analysed,</P> Thu, 14 Feb 2019 10:35:39 GMT https://community.cisco.com/t5/network-security/asa-access-rule-issue/m-p/3801703#M7002 Dennis Mink 2019-02-14T10:35:39Z