Downloadable ACLs on Cisco ASA

[humair.amil]

Hi all,

I know we can use Cisco ACS for applying downloadable ACLs to a Cisco ASA firewall on per user basis.

I want to know that how long do these downloadable ACLs exist in the memory of the ASA. Do these ACLs get flushed out of ASA's memory as soon as the users disconnect or do they stay there forever?

Please help.

[Collin Clark]

They are removed when the user disconnects. When the user connects again the policy is re-download (in case any changes were made).

Hope it helps.