I have an RV325 that has an implicit deny at the end that doesn't work. We have a statement above that, that denies all traffic from external sources to the internal network. When it's enabled, you can't remote desktop in and works like it should. When it's disabled, you can remote in. At the bottom is the statement that is enabled that denies all traffic from all external services to all internal services. When the first deny rule is disabled and the bottom rule is enabled, you can remote in from anywhere.
Is this a bug? I know the RV325 isn't an ASA by any means, but this customer insists on using it for some reason or another.
