Solved: asa block existing connection

jmattbullen · ‎09-02-2014

Right now I have a rule that allows ICA connections for citrix. We would like to have the ability to stop new connections but not terminate existing ones immediately. If I disable the permit will it terminate all the existing entries in the conn table and kill the active sessions?

Karsten Iwen · ‎09-02-2014

You can change the ACL as you want and your existing connections stay as they are. ACL-entries are only evaluated for new connections.

--
If you found this post helpful, please give it Kudos. If my answer solves your problem, please click Accept as Solution so others can benefit from it.

View solution in original post

Karsten Iwen · ‎09-02-2014

You can change the ACL as you want and your existing connections stay as they are. ACL-entries are only evaluated for new connections.

--
If you found this post helpful, please give it Kudos. If my answer solves your problem, please click Accept as Solution so others can benefit from it.