Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

ASA implicit deny rule


I have a 5550 working in routed mode with 8.0(4) version. My configuration have one physical interface in tunnel mode with 4 subinterface, 3 of them are inside and the forth one is dmz interface. Another phisical interface is configured as Outside interface.

On the inside interfaces there are applied ACLs inbound to allow only permitted traffic and at the end of all ACL there are the implicit deny rule. As I excpected all and just all permitted traffic by acl are allowed to pass through inside interfaces to less secure interface as Outside, while all other traffic denied by implicit deny rule. Instead I am experiencing a strange behavior on the inside interfaces that i can't undestand, It seems as implicit deny rule not working and all traffic is permitted. To block traffic I needed to apply manually a deny any any rule to all inside interface's ACL.

Can pleas anyone help me to undestand this behaviour? Is it due a wrong configuration or just a bug?

Any suggestion will be very appreciated.




VIP Purple

Please post yoour config. All

Please post yoour config. All in all it should work as expected.

Don't stop after you've improved your network! Improve the world by lending money to the working poor:
New Member

Hi Karsten,thank you for your

Hi Karsten,

thank you for your reply.

Issue is due the Cisco Bug ID CSCsq91277 . I solved to upgrade release on ASA.

Thank you anyway