Can we add ip based access list in zone based firewall in C8300-2N2S-6

[Pradip Bhattacharya]

We are trying to block few public ips in zone-based firewall. What typically in zone-based firewall, we can control based on protocol. Can we add an access list to be filtered in zone-based firewall policy map?

[MHM Cisco World]

Sure you can, 

Just config access list 

Then under class match this acl

And under policy map add class and action drop. 

MHM

[liviu.gheorghe]

And don't forget to assign interfaces to defined zones.