Should I have a deny any any rule at the below of my Pix rules?

whiteford · ‎01-09-2008

Hi, I am using the ASDM to look through the rules. I have inside rules and outside rules and DMZ rules. For example at the bottom of the rules for the inside list should I have a deny any any as all the rules above this will still work?

massimiliano.serafino · ‎01-09-2008

Hi,

From : http://www.cisco.com/en/US/docs/security/asa/asa70/configuration/guide/traffic.html

"Access lists have an implicit deny at the end of the list, so unless you explicitly permit it, traffic cannot pass"

I hope this helps.

Best regards.

Massimiliano.