The use of Service Groups and Network Groups

matthew.bauer · ‎01-29-2004

Hey all,

How much additional overhead, if any, is there to using Network and Service Groups. I have a Pix 515e with os 6.3.3, I have a set of ACL's a mile long which could be reduced by using the different types of groups. Has anyone had any bad experience with them

Thanks

Matt

jmia · ‎01-29-2004

Hi,

It's a very good idea to use Object groups if you have a very long list of ACLs on you config, another solution is to use TurboACL. I have not had any problems with Object group configurations on the PIX.

For Object Group:

http://www.cisco.com/warp/public/707/pix_obj_grp.html

And also check this document out for a good explanation on Object Grouping on PIX

http://www.giac.org/practical/GSEC/Bill_Donaldson_GSEC.pdf

Hope this helps out and please rate this post if does help you.