ACP on FTD

[benolyndav]

Hi

When I run a packet tracer I see traffic is allowed but there is a Block rule in Manadtory ACp any idea why this is please.???

thanks

[balaji.bandi]

If i understand correctly if your question... as FW default will be denied, so we allowed what required explicitly allowed.

[benolyndav]

Hi 

yes exactly so it should block anyway regardless of whether I added an ACL to block, when i run the packet tracer its allowed. ???

Thanks

[balaji.bandi]

Do you mean that the default ACP is blocked in place, but if you to Packet trace it allowed?

can you post the PT output here for us to understand?