I have created security intelligence block list but sometimes it allows the connections like the one highlighted and it is identified as attackers. Is that because the intrusion policy is set to detection not prevention?   

Currently I am having trouble understanding all these products. I purchased two ASA  5508-X and during the setup Cisco TAC advised to install something called "FMC" to manage the device.I am renewing the same contracts every year. Recently whenever I...