ASA 5500 series - Implicit deny

[tobascojojo]

Hi All,

I had a quick question regarding implicit denies on ASA5500. Are implicit deny rules logged? Or does an explicit deny rule have to be configured to log all dropped packets?

Thanks in advance for any help.

[guibarati]

When you look at realtime log monitor through ASDM it will show you the deny enteries even if it's caused by an implicit rule.

[Collin Clark · Accepted solution]

Implicit is not logged (CLI) and if you configure explicit, it can log.

Hope that helps.

[tobascojojo]

Thanks all! Responses were very helpful.