asa access rules question....

[desrochj1]

Hello,

I am doing rules between interfaces on a ASA 5520.

I need to change the rules on a regular basis (weekly).

if i suddenly add a " deny rule " on an interface, it seems

that tcp connections made before applying the rule are
not suddenly killed by the rule. Only new connection attempts are

dropped by the rule.

When applying a new rule, is there a way to kill already connected

tcp connections ? even if the rule denies it

[Anu M Chacko · Accepted solution]

Hi,

You can issue a "clear conn" to clear all previous connections.

Hope this helps!

Regards,

Anu

P.S. Please mark this question as resolved if it has been answered. Do rate helpful posts.