Issues with blocking VPN Traffic on Cisco ASA5520

[rzdziech]

Hardware Info:

Cisco Adaptive Security Appliance Software Version 8.0(3)
Device Manager Version 6.1(1)

ASA5520

Problem:

Hi Guys, 

I am trying to block this VPN attempts to my vpn box but by some reason I am not able to do it.

I have already blocked this IP on the outside interface in ACL with protocol IP 

By some reason I still see this happening in my logs every few seconds.

I have read about control plane by it looks it might be not supported in my version?

Thanks for any help.

Group = 217.138.134.131, IP = 217.138.134.131, Error: Unable to remove PeerTblEntry

Group = 217.138.134.131, IP = 217.138.134.131, Removing peer from peer table failed, no match!

Group = 217.138.134.131, IP = 217.138.134.131, Can't find a valid tunnel group, aborting...!

[Sheraz.Salim]

version 8.0(3) is old version consider doing upgrade. here is a sample config. change according to your needs.

172.250.246.42 is the source (outside rogue ip) try to connect to ASA.

access-list cp-outside deny udp host 172.250.246.42 any eq 4500

access-list cp-outside deny udp host 172.250.246.42 any eq 500

access-list cp-outside deny esp host 172.250.246.42 any