topic Re: Sensor blocking feature in Network Security https://community.cisco.com/t5/network-security/sensor-blocking-feature/m-p/1151179#M77792 <HTML><HEAD></HEAD><BODY><P>Thk.</P></BODY></HTML> Mon, 09 Feb 2009 08:27:08 GMT thananchai747 2009-02-09T08:27:08Z Sensor blocking feature https://community.cisco.com/t5/network-security/sensor-blocking-feature/m-p/1151177#M77790 <P>If i already use ACL on router interface and then should i do about the Pre-Block ACL and Post-Block ACL?</P><P>what router will do the Existing ACL on the Interface?</P><P>And the name of the ACL used on the router must be in form only? </P><P></P> Sun, 10 Mar 2019 11:29:23 GMT https://community.cisco.com/t5/network-security/sensor-blocking-feature/m-p/1151177#M77790 thananchai747 2019-03-10T11:29:23Z Re: Sensor blocking feature https://community.cisco.com/t5/network-security/sensor-blocking-feature/m-p/1151178#M77791 <HTML><HEAD></HEAD><BODY><P>First start by reading through this section:</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/partner/docs/security/ips/6.2/configuration/guide/cli/cli_blocking.html#wp1050119" target="_blank">http://www.cisco.com/en/US/partner/docs/security/ips/6.2/configuration/guide/cli/cli_blocking.html#wp1050119</A></P><P></P><P>When the sensor's ACL is written to the router and applied to the interface/direction, then it will remove the application of any previous ACL to that same interface/direction.</P><P>Only one ACL may applied to a specific interface/direction.</P><P></P><P>The previous ACL will still exist in the router's configuration. It will just no longer be applied to that router interface/direction.</P><P></P><P>A good rule of thumb if you already have an existing ACL applied is to configure the sensor with the Name of that ACL as the Post-Block ACL.</P><P></P><P>When the sensor connects to the router it will read in the configuration lines from your existing ACL and store them in the sensor's memory. When the sensor creates it's own ACL it will add the lines from your ACL to the bottom of the ACL it creates.</P><P></P><P>You can use either numbered or named access-lists as the Pre or Post-Block ACL.</P><P>(The sensor will generate a named acces-list when it creates its access list on the router).</P></BODY></HTML> Fri, 06 Feb 2009 16:45:10 GMT https://community.cisco.com/t5/network-security/sensor-blocking-feature/m-p/1151178#M77791 marcabal 2009-02-06T16:45:10Z Re: Sensor blocking feature https://community.cisco.com/t5/network-security/sensor-blocking-feature/m-p/1151179#M77792 <HTML><HEAD></HEAD><BODY><P>Thk.</P></BODY></HTML> Mon, 09 Feb 2009 08:27:08 GMT https://community.cisco.com/t5/network-security/sensor-blocking-feature/m-p/1151179#M77792 thananchai747 2009-02-09T08:27:08Z