Access Control Policy Rule

[benolyndav]

Hi

So hope ive been getting this right if i want to block traffic to and from the same addresses I creat a rule it would be as the below

source ANY   destination ANY  source networks 23.33.44.55  destination networks 22.33.44.55  Source ports Any  Dest ports ANY

and block with reset

??

[Rob Ingram]

@benolyndav You'd need 2 rules, 1 from "any" to 22.33.44.55 block with reset and another from 22.33.44.55 to "any" block with reset.

[benolyndav]

Hi Rob

Thanks 

Traffic the other way would be blocked anyway unless explicitly allowed from Outside to inside so is the 2nd rule even needed?

Thanks

[Rob Ingram · Accepted solution]

Hi @benolyndav sure if you've an explict or implict deny rule at the bottom of the ACP from outside to inside, then yes it would not be needed.