Using a Deny IP ACL to Block Network Traffic
This example displays a network with a Finance server on one part of the network, and an Engineering server on another part. You want to block the Engineering server from the Finance server in order to protect company sensitive information. See Configuring an Internal Deny ACL to review the configuration sample.
Figure 1: Network Example - IP ACL for Internal Servers
Or you may discover that an external source is attempting to access your network, and ping your servers for IP addresses. You can use an ACL to block the specific source using an IP ACL.
Figure 2:IP ACL Blocking External Access
See Configuring an External Deny ACL to review the configuration example.