Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I have a server that needs to access DMZ via ssh so it can be patched. I created an ACL in the inside zone to allow this server access all-dmz zone with any port and dest port ssh. This is now showing the drop below:Phase: 1Type: ACCESS-LISTSubtype...
I did the packet-tracer and did found one Denny ACL above the one I created and the server IP address in that ACL I did make some change to move the ACL above this "access-list CSM_FW_ACL_ advanced deny ip ifc inside object-group -Internet object-gro...