topic Yes and thats my "problem". I in Network Security

flush object-group members

Rasmus Kiilerich — Tue, 12 Mar 2019 09:23:40 GMT

Hi Forum

In my ASA firewalls I have a object-group per AWS service/Region and i´m trying to make a simple script to update some object-groups.

It will make my script a lot simpler if I can clear/flush a Object-group for member with a single command without removing the object-group itself.

Does anyone know of a single command to flush/clear only the network-object in a given object-group?

e.g.

In the "object-group network AWS-ROUTE53-GLOBAL" i like to clear all "network-object" but retain the "object-group network AWS-ROUTE53-GLOBAL"

object-group network AWS-ROUTE53-GLOBAL
network-object 52.95.110.0 255.255.255.0
network-object 205.251.192.0 255.255.248.0

Unfortuanately I believe you

Marvin Rhoads — Sat, 20 May 2017 14:32:39 GMT

Unfortuanately I believe you have to remove the group members one at a time if you wish to keep the object-group.

Of course if you do "no object-group xxxx" followed by "object-group xxx" that would work but only if the group was not referenced elsewhere in the configuration.

Yes and thats my "problem". I

Rasmus Kiilerich — Sat, 20 May 2017 14:35:50 GMT

Yes and thats my "problem". I will have to remove all ref. in any ACL i´m using the object-groups in and reinsert the in the right place again.

Bummer