topic Re: asa objects in Network Security

asa objects

bluesea2010 — Mon, 23 Aug 2021 14:45:32 GMT

Hi ,

The above is object from ASa ASDM , some are shown in green and some are shown in blue

What does it mean

Thanks

Re: asa objects

Milos_Jovanovic — Tue, 24 Aug 2021 05:44:38 GMT

Hi @bluesea2010,

Your screenshot is very trimmed, so it doesn't contain much info.

However, I believe green ones are objects related to interface networks, while blue ones are standard objects. If you try to modify green ones, you'll realize that you have no name for that object. But, if you compare them with your interfaces addressing, you'll realize that those are subnets of your connected interfaces.

BR,

Milos

Re: asa objects

bluesea2010 — Wed, 25 Aug 2021 05:50:11 GMT

Hi @Milos_Jovanovic

what does it mean by objects related to interface networks

Is there any issue using this objects in an acl

Thanks

Re: asa objects

Milos_Jovanovic — Wed, 25 Aug 2021 06:01:06 GMT

If the interface is described with 'ip address 192.168.1.1 255.255.255.0', and nameif is ''inside, then this object will be named 'inside-network' and it will be defined as '192.168.1.0 255.255.255.0'.

Yes, you could use this object whithin your policies, although I prefer not to use anything that I didnt created myself.Once you try to add this object, you'll notice it will convert it's name to IP format.

You could also create your own object, with same content, and use that one instead.

BR,

Milos