Ise dacl and vpn filter

[Spyros Kasapis]

Hello ,

In a scenario that ASA has it's vpn-filter-list and after the posturing check a DACL is also assigned.

Both lists works or the DACL overrides asa-vpn-filter ?

Spyros

[Rob Ingram · Accepted solution]

Hi,

A DACL and VPN Filter are a different method to achieve the same thing, if both applied they’d conflict. There is no information that I am a aware of that states which if any take precedence, normally you’d be expected to use one or the other.

Personally I’d use DACL and apply dynamically via ISE.

HTH