deny tcp any host

correct,when I want to block access to the subnet for any host on the LAN?

  • 1
    Cisco makes routers and firewalls which could potentially filter traffic. Which product are you asking about? Sep 2, 2014 at 8:07

1 Answer 1


Presuming it is an ASA/FWSM it is:

deny tcp any [log]

The log portion is optional depending on the version being run. Specifying "host" would only be if you are going to specify access to be denied to a single host, for example:

deny tcp any host [log]

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.