Cisco ASA 5516-x allowing access after removing access-list

Having a weird issue. I have a rule that allows access to the inside network on a port and it works fine. I then remove the rule and I can still access the port on the inside. Any ideas? It will only hit that one port it will not allow access to other ports. Only have about 20 access-lists right now so it is easy to see if I have a AL configured for the port.
OSVAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Jimmy Larsson, CISSP, CEHNetwork and Security consultantCommented:
If there are existing connection they will not be torn down just because you changed the acl. Use "clear conn" do do that.

Also try the packet-tracer command to simulate the packet and see if you have overlooked something in the acl.

Last resort, post your sanitized config here for further help.

/Jimmy
1

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Alexander FritzscheCommented:
To solve this, we really need the config here.
Is the access-list and access-list entry ingoing or outgoing on the interface?
What security level do the interfaces have?

" It will only hit that one port it will not allow access to other ports." --> do you use a BVI for the inside? do you have permitted intra-interface-traffic? What are you trying to accomplish?

br
Alex
0
OSVAuthor Commented:
If there are existing connection they will not be torn down just because you changed the acl. Use "clear conn" do do that.


Thank You I think this was what was going on.
1
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Cisco

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.