05-10-2010 10:13 AM - edited 03-11-2019 10:43 AM
I have been using ASDM for some time
now. I have always had a quesiton about what exactly Service Groups are that are built using the Service type TCP/UDP vs. ones that are specifically TCP or UDP. Out of fear I have always built Service Groups for TCP only or for UDP only.
Lets say I need a Service Group that needs ports 102, 20000, and 21000 in it, but I am unsure if the ports need to be UDP or TCP. If I create the Service Group using type TCP/UDP, will it allow both TCP and UDP in for the specific port?
Thanks
Kevin
Solved! Go to Solution.
05-10-2010 10:26 AM
k-melton wrote:
I have been using ASDM for some time
now. I have always had a quesiton about what exactly Service Groups are that are built using the Service type TCP/UDP vs. ones that are specifically TCP or UDP. Out of fear I have always built Service Groups for TCP only or for UDP only.
Lets say I need a Service Group that needs ports 102, 20000, and 21000 in it, but I am unsure if the ports need to be UDP or TCP. If I create the Service Group using type TCP/UDP, will it allow both TCP and UDP in for the specific port?
Thanks
Kevin
Kevin
Yes it would. In fact that is exactly what service objects are used for ie. so you don't have to create 2 separate groups, one for TCP and one for UDP. So you would configure "object-group service
Jon
05-10-2010 10:26 AM
k-melton wrote:
I have been using ASDM for some time
now. I have always had a quesiton about what exactly Service Groups are that are built using the Service type TCP/UDP vs. ones that are specifically TCP or UDP. Out of fear I have always built Service Groups for TCP only or for UDP only.
Lets say I need a Service Group that needs ports 102, 20000, and 21000 in it, but I am unsure if the ports need to be UDP or TCP. If I create the Service Group using type TCP/UDP, will it allow both TCP and UDP in for the specific port?
Thanks
Kevin
Kevin
Yes it would. In fact that is exactly what service objects are used for ie. so you don't have to create 2 separate groups, one for TCP and one for UDP. So you would configure "object-group service
Jon
05-10-2010 11:03 AM
Jon
Thanks for the quick response!
Kevin
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide