Each interface on a Cisco ASA has a security level. By default the ASA ACL allows traffic from higher to lower security level, but not the other way around.

Question: When I add an additional ACL rule, does the implicit rule still apply if my inserted rule doesn't match?

1 Answer 1


No, specific rule takes the implicit ANY->ANY LESS SECURE rule down. If your rule is not matched, the packet will proceed to the implicit DENY.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.