If I want to enable a router to block traffic based on a triggered signature from an IPS sensor, and that router currently doesn't have an existing ACL on the interface that will participate in the block, will the ACL be dynamically created? What I'm trying to account for is the blocking of all traffic with the implicit deny all at the end of any ACL.

thank you,

Bill