Do I need to restart PIX 506e after making changes to access-lists?

I've been getting "Deny Protocol 50" warnings so I added an access-list to allow the traffic.  I already executed the "access-group INBOUND in interface outside" command but I still get the deny protocol 50 message.  When I type show access-list, the hitcount for that line is 0.  I've had experience in the past where I must restart the PIX before the access-lists take effect.  Is there a way I can do this without having to restart the PIX?

Thanks.
LVL 1
ITLighthouseAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

from_expCommented:
you can try to issue clear xlate, but there is no need to restart your device in order to reapply changes to acls
0
KutyiCommented:
You should not have to restart the PiX.  If the hitcount is showing 0 then a request to pass on that port has not made it to the PiX.  Perhaps your ISP is blocking some traffic.
0
ITLighthouseAuthor Commented:
I tried clear xlate, but it didn't make a difference.  This has to do with using Cisco VPN Client behind a Nat'd PIX.  I login to remote server and the connection gets established, but no traffic will pass.  I did the fixup protocol esp-ike thing but I  get deny protocol 50 errors in the log.  So I added the following line -
access-list INBOUND permit tcp any interface outside eq 50

The error in the log doesn't go away and when I "show access-list" the hitcount for that line is 0, so I'm thinking maybe the access-list I added is incorrect or it is not taking effect.
0
Voltz-dkCommented:
It's protocol #50, not port number.

Try
access-l INBOUND permit esp any interface outside
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
ITLighthouseAuthor Commented:
Bingo!!!  Thanks.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Cisco

From novice to tech pro — start learning today.