FWSM- using object-groups in ACL

nkariyawasam · ‎07-31-2008

Can I use network object-group as source addrese(s) in ACL and just a network ( not a group) as target in the ACL ?

for example:

object-group network TEST

network 1.1.1.0 255.255.255.0

network 2.2.2.0 255.255.255.0

access-list MIX extended permit ip object-goup TEST 3.3.3.0 255.255.255.0

Is this conmfig supported in FWSM ?

Jon Marshall · ‎07-31-2008

Yes this should work fine.

Are you having problems with it ?

Jon

nkariyawasam · ‎07-31-2008

I have not applied it yet, but going to apply to a live data center. Therefore I just want to make sure that there will not be any issues.