login block-for blocks port 22 / SSH traffic?

[NInja Black]

Hi,

So I configured the "login block-for 600 attempts 5 within 600" command and it creats the below ACL

Extended IP access list sl_def_acl
10 deny tcp any any eq telnet log
20 deny tcp any any eq www log
30 deny tcp any any eq 22 log
40 permit tcp any any eq 22 log

Per the ACL it will deny tcp connections to port 22. Wouldnt this block SFTP traffic too?

[Philip D'Ath · Accepted solution]

Yes, since it runs over SSH on tcp/22.