asa block existing connection

[jmattbullen]

Right now I have a rule that allows ICA connections for citrix.  We would like to have the ability to stop new connections but not terminate existing ones immediately.  If I disable the permit will it terminate all the existing entries in the conn table and kill the active sessions? 

[Karsten Iwen · Accepted solution]

You can change the ACL as you want and your existing connections stay as they are. ACL-entries are only evaluated for new connections.