https://community.extremenetworks.com/t5/extremeswitching-eos/flow-setup-done-before-acls/m-p/59240#M1545 From what I've ssen, the ACLs are called last, meaning you can't use an ACL to prevent a flow from being set-up  Tue, 27 Jun 2017 00:39:00 GMT ralf_hildebrand 2017-06-27T00:39:00Z https://community.extremenetworks.com/t5/extremeswitching-eos/flow-setup-done-before-acls/m-p/59239#M1544 Hi,<BR /> <BR /> S-Series hardware - is the flow setup within the system ASIC done before handling ACLs?<BR /> Wed, 25 Feb 2015 15:48:00 GMT https://community.extremenetworks.com/t5/extremeswitching-eos/flow-setup-done-before-acls/m-p/59239#M1544 mp2014 2015-02-25T15:48:00Z https://community.extremenetworks.com/t5/extremeswitching-eos/flow-setup-done-before-acls/m-p/59240#M1545 From what I've ssen, the ACLs are called last, meaning you can't use an ACL to prevent a flow from being set-up  Tue, 27 Jun 2017 00:39:00 GMT https://community.extremenetworks.com/t5/extremeswitching-eos/flow-setup-done-before-acls/m-p/59240#M1545 ralf_hildebrand 2017-06-27T00:39:00Z https://community.extremenetworks.com/t5/extremeswitching-eos/flow-setup-done-before-acls/m-p/59241#M1546 Flow setup is done by the forwarding engine sending unknown traffic to the cpu. if there is an ACL that denies the connection the flow should not be allowed.<BR /> Tue, 27 Jun 2017 00:52:00 GMT https://community.extremenetworks.com/t5/extremeswitching-eos/flow-setup-done-before-acls/m-p/59241#M1546 Daniel_Coughlin 2017-06-27T00:52:00Z