ACL's with no matches?

[KGrev]

General question:

If an ACL has never appeared to have a match;

i.e.: 20 permit ip 10.0.0.0 0.0.0.255 20.0.0.0 0.0.0.255 (300 matches)

Could it be assumed that it is not needed? (after careful examination of potential dataflow)

Thanks

[balaji.bandi · Accepted solution]

yes if you enabled logs and not have any matches means never have any hit count, just remove the access line and do monitor, in case issue easy to add the line to role back to working condition.

[KGrev]

Thank you for the help