OT - ASA time based ACL state?

All,
      In a time based ACL applied to an ASA, if the ACL "expires" at 0800,
does that mean that existing connections will be allowed to continue and no
new sessions as of 0800 or will all connections functioning at 0759 be
dropped (tcp session timeout) at 0800? On a router I think it's the latter,
on an ASA I think it's the latter but I'm a little confused on this and
can't test it anywhere. Anyone?

Charles

Blogs and organic groups at http://www.ccie.net
Received on Fri Jul 17 2009 - 10:11:08 ART