controlling VPN traffic with ACLs? on ASA 8.4

[Leon Khanan]

siteA 10.10.10.1/24 ----s2s----- siteB 12.10.10.1/24

how do i control an incomming traffic from a remote site (ipsec site to site) as in how to block certain services/ip addresses ad so on ?  

i tried to track to see what is the interface the encrypted traffic comes to in order to filter it .... but i dont see any matches on the outside in.

on which interface do i apply the access list ?

[ajay chauhan · Accepted solution]

Basically you can do two things -

1) VPN filter

2) block at source

lets say you want to block port 80 from site A- Then apply acl on inside interface in direction . or use vpn filter at site B.

Thanks

Ajay

[Leon Khanan]

Thanks Ajay