Can somebody explain why some rules have the amount of matches next to it when you do a show acl command on CISCO 3845 ASA and on some, for instance, the allow http traffic command shows none.
here's an example;
2260 permit tcp host 10.220.*.* host 10.220.*.* eq **** (497 matches)
1780 permit tcp 10.220.*.* 0.0.7.255 any eq www
Notice the www rule has no matches next to it?
I want to figure out which rules are not in use as the ACL is becoming too large.