Teardown vs deny

[Adam David]

Hi,

Since I couldn’t find it in the internet, I hope I can find it here.

What is the difference between teardown & deny in Cisco ASA syslog message?

Thanks in advance

[Patrick0711]

Teardown means that an established connection was deleted from the conn table for whatever reasoson (client of server issuing a FIN or RST, idle timeout being exceeded, etc).  Deny means that the connection was denied by the firewall.