except for the last 4 lines, you're specifying source-ports in all of the deny statements.
for example, you're only blocking access to port 139 IF the source port is 19, 9, 7, 137, 138, 139, 110, 513, 69 or 23.
For a normal tcp connection where the source-port is probably a random socket between 1025-65535 it's not going to match these lines.
So it's unlikely that any of your deny lines will be hit.
If you want to block all traffic to tcp port 139, the relevant access-list entry should look like:
access-list Deny_Policy_For-Anyconnect line <#> extended deny tcp any any eq 139
(source port = any)
---
Please mark helpful answers & solutions
---
