Does anyone know if Cisco has a recommendation for the number of rules/access list lines per firewall? I know within Check Point, there is a recommendation for no more than 50 rules per firewall within the Security Policy Rule Base. Looking for an answer for an audit question.
with pix 6.2 and complied access lists, multi-thousand line lists were tested and worked fine. the real limit is in available memory to compile the list, you need minimum 2M free to compile.
