×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

The use of Service Groups and Network Groups

Unanswered Question
Jan 29th, 2004
User Badges:

Hey all,


How much additional overhead, if any, is there to using Network and Service Groups. I have a Pix 515e with os 6.3.3, I have a set of ACL's a mile long which could be reduced by using the different types of groups. Has anyone had any bad experience with them


Thanks

Matt

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.

Hi,


It's a very good idea to use Object groups if you have a very long list of ACLs on you config, another solution is to use TurboACL. I have not had any problems with Object group configurations on the PIX.


For Object Group:


http://www.cisco.com/warp/public/707/pix_obj_grp.html


And also check this document out for a good explanation on Object Grouping on PIX


http://www.giac.org/practical/GSEC/Bill_Donaldson_GSEC.pdf


Hope this helps out and please rate this post if does help you.

Actions

This Discussion