Any-Any Block is not working on Cisco FTD 3105

[shantilal]

Hi Team,

The Last Any-Any block is not working as expected. When we set action of this rule to Allow then all the user created policies work fines (Created above this rule) & if we set the action to deny then all the traffic gets blocked. 

Any suggestion on the same.

[MHM Cisco World]

the any to any in end is default, you can not delete it you can only change the action
so if you want the host to pass the ACP you need to add above it new ACL allow any any (or specific subnet) and action is allow or trust 
MHM

[shantilal]

As I told when i set action to Block of the default any rule then why explicit rules are not getting matched.

[MHM Cisco World]

There aretewo prefilter and ACP.

I think you config prefilter not acp

Can I see the acl in ftd

https://www.cisco.com/c/en/us/support/docs/security/firepower-ngfw/212321-clarify-the-firepower-threat-defense-acc.html

MHM