Kinda green on pix but getting better. I was creating ACL to block a group of IP addresses from full access to the internet. I want to keep site like microsft and symantec available for updates. I used DNSstuff.com and got some IP for MS, but when I do an audit on my firwall I see denied IP addresses for microsoft. Is adding every IP address from microsoft the only way to stop seeing deny?
