https://community.cisco.com/t5/network-security/asa5520/m-p/857460#M960324 <HTML><HEAD></HEAD><BODY><P>Is there a Deny farther up the ACL? Any hit counts on the ACL for SSH? Can you post the entire log message (minus the IPs)?</P></BODY></HTML> Tue, 20 Nov 2007 19:47:57 GMT Collin Clark 2007-11-20T19:47:57Z https://community.cisco.com/t5/network-security/asa5520/m-p/857459#M960322 <P>hello,</P><P></P><P>I'm having trouble with a security policy rule that is denying outbound connections. I am trying to allow outbound SSH connections to specific IP addresses. Therefore, I added a rule on the inside incoming interface that allows tcp source 192.168.0.0/24 dest ip-group tcp-service group. The ip-group consists of 3 IP addresses of servers. The TCP service group consists of tcp ports 902, 9999, ftp, ftp-data, and ssh. 902, 9999, ftp, ftp-data work fine, but the SSH does not work. I get a message in the log deny tcp src 192.168.0.x to x.x.x.x:22 on the internal access list. </P><P></P><P>I have a NAT rule for these connections, but it looks like the firewall denies it before the NAT rule takes affect.</P><P></P><P>Let me know if anyone has any suggestions. Thanks,</P><P> </P> Mon, 11 Mar 2019 11:33:18 GMT https://community.cisco.com/t5/network-security/asa5520/m-p/857459#M960322 sweigle 2019-03-11T11:33:18Z https://community.cisco.com/t5/network-security/asa5520/m-p/857460#M960324 <HTML><HEAD></HEAD><BODY><P>Is there a Deny farther up the ACL? Any hit counts on the ACL for SSH? Can you post the entire log message (minus the IPs)?</P></BODY></HTML> Tue, 20 Nov 2007 19:47:57 GMT https://community.cisco.com/t5/network-security/asa5520/m-p/857460#M960324 Collin Clark 2007-11-20T19:47:57Z https://community.cisco.com/t5/network-security/asa5520/m-p/857461#M960326 <HTML><HEAD></HEAD><BODY><P>thanks, you were right, there was something farther up the ACL that was denying thanks!</P></BODY></HTML> Tue, 20 Nov 2007 22:50:29 GMT https://community.cisco.com/t5/network-security/asa5520/m-p/857461#M960326 sweigle 2007-11-20T22:50:29Z