inactive firewall access rule can still work?

[donnie]

Hi all,

I have a asa firewall which has a inactive access rule whose enabled checkbox is not checked. However it seem that this access rule can still work.

Hence i would like to know what is the difference in having the access rule's enabled checkbox check or uncheck. Pls advise, thks in advance.

[terrygwazdosky]

I'm assuming by rule you mean an inactive access-list entry?  If so, did you try clearing the translations (clear xlate) after disabling it?

Try running packet-tracer to determine if that is the rule that the traffic is hitting.