I am installing a new Cisco router and have configured an ACL that denies traffic from any network outside CONUS. I am seeing hits on my access list, which I would think means it's blocking traffic, but I'm still seeing conversations from those networks in NTA... sometimes a lot of traffic. Would I still see this traffic in top conversations if it is being denied, or does this signify that traffic is still getting through? I haven't connected the inside interface yet... waiting until I get this solved.
Thanks!