Does Cisco Security Manager Deploy Object-Groups in ACL's

Unanswered Question
Oct 24th, 2007
User Badges:


I am have just recently installed Cisco Security Manager 3.1 and I am trying to setup a Hub and Spoke VPN. I have discovered my firewalls and have managed to setup the VPN. When I go to deploy my configuration, I will have a look at the preview before deploying and have discovered that the ACL's for the VPN's are not using the Object Groups that are configured on the firewall. They are using just IP addresses. Is there a setting within CSM that allows the use of object groups within ACL's.

I hope this is an easy problem to resolve.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
beecher Wed, 11/07/2007 - 09:14
User Badges:
  • Cisco Employee,

Security Manager does not currently leverage object groups for ACL objects used in VPNs. An enhancement bug has been filed under CSCsl20196 and is something we are looking to address in the upcoming Security Manager 3.2 release due late 1QCY08.

suffolksupport Wed, 11/07/2007 - 09:33
User Badges:

Cheers for the info. Look forward for the update. At Least I now know it nothing I was doing wrong.

Best Regards,



This Discussion