ASA ACL for Inside to Outside denial of Specific IP

dianna.maclaren · ‎04-27-2007

Hello all,

We have new ASA 5520's and I need to deny traffic from inside to specific outside IPs. How can I accomplish this without denying traffic to all other outside IPs? As soon as I add the rule to the inside interface, it removes the Permit to "any less secure networks". Obviously I'm new at this, so any help is appreciated!

Thanks in advance for your answers!

mark.j.hodge · ‎04-27-2007

Try adding a

permit ip any any

line to the end of your access list

dianna.maclaren · ‎05-01-2007

Mark,

Thanks so much. After dinking around a little more and using your suggestion, that worked. Its the deny any any as the last line that threw me off!

Dianna