topic Network Object Audit in Network Security

Network Object Audit

DEENA VERAPPAN — Mon, 22 Mar 2021 18:53:18 GMT

Hi All, looking for some help with exporting network objects from the ASA. The ASDM allows you to view and delete unused objects, is there a command to run in CLI to extract the same information?

Thanks in advance for our help

Re: Network Object Audit

balaji.bandi — Mon, 22 Mar 2021 19:05:39 GMT

I suggest having some good scripts if you able to understand :

https://github.com/PackeTsar/ASA-Cleanup

My suggestion before deleting, disable for 7 days and delete eventually, if this is a big rule base you need to more cautious disable-monitor-delete(iterate, few rules at a time).

Re: Network Object Audit

Marvin Rhoads — Tue, 23 Mar 2021 04:03:35 GMT

I've also used the tool at tunnelsup.com with great results.

https://www.tunnelsup.com/config-cleanup/

If you want a native Cisco tool, CDO offers this functionality but requires a license.