Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
I added about 500 network objects by IP, and group them into an object group called white-list. 2 days later, I modified ACL access-in from allowing source any to white-list. The action was to delete original access-in ACL (total 6 rules, included im...
Thank you all for prompt answers, finally found where the key config is to allow same security-level traffic and all interface is "0". While the interface does not config ACL, the traffic is passing through.
@Rob Ingram this is the configuration before changes. the actions I modified of acl is as below:
no access-list access_in extended permit object-group SERVICE_300 object-group NETWORK_300 object-group NETWORK_1no access-list access_in extended permit...
@Rob Ingram
before set white-list, ACL access-in had applied to interface internet wan1 and internet wan2.
I simplified the original acl config as below:
access-list access_in extended permit object-group SERVICE_300 object-group NETWORK_300 object-...