Snmp Traps don`t stopped at PIX

[pslavkovsky]

Hi,

I need to stop SNMP Traps on PIX (ver. 6.3(5)), Traps comes from outside to inside, it comes very often, every 5 seconds. I added row to access list on first place:

deny udp <source IP> <destination IP> eq snmptrap

But hitcount is only 29, and SNMP traps still comes to inside.

How is ti possible?

Thanks

[froggy3132000]

Can you post your config? Sounds like you have a translation built for this already.

[pslavkovsky]

Sorry, I can not post config.

But I do not use translation.

I use nat 0 access-list

and

sh xlate:

0 in use, 0 most used

Is it possible that PIX has connection created by first SNMP trap and I added row in ACL after this and now all SNMP traps go over this existing connection?

[pslavkovsky]

Now it is better, hitcount is about 5000, but still comes some this traps on inside, I see this traps on network Management console.