Guest

Preview Tool

Cisco Bug: CSCuo78892 - Traceback when using IDFW ACL's with VPN VPN Filters

Last Modified

Apr 16, 2020

Products (1)

  • Cisco ASA 5500-X Series Firewalls

Known Affected Releases

9.0 9.1(5.1)

Description (partial) 

Symptom:
When removing a access-list entry that has a username defined, the ASA crashes. The access-list that was removed was part of a VPN filter.

access-list vpn-filter-acl extended deny ip user LOCAL\Test any host 192.168.1.1

group-policy testgrouppolicy attributes
 vpn-filter value vpn-filter-acl

Conditions:
Access-list has a username defined
Access-list is used in a VPN filter.
Bug details contain sensitive information and therefore require a Cisco.com account to be viewed.

Bug Details Include

  • Full Description (including symptoms, conditions and workarounds)
  • Status
  • Severity
  • Known Fixed Releases
  • Related Community Discussions
  • Number of Related Support Cases
Bug information is viewable for customers and partners who have a service contract. Registered users can view up to 200 bugs per month without a service contract.