topic - We assign access-list on in Network Security

ASA ASDM hit count

damilola.adebanjo1 — Tue, 12 Mar 2019 06:06:24 GMT

Hi all,

Does anyone know any tool or how to generate reports for firewall rules (acl) created that has no or 0 hit count in cisco ASDM.

Appreciate your repsonses.

Hi,I could not find anything

Akshay Rastogi — Sat, 13 Jun 2015 14:44:33 GMT

Hi,

I could not find anything which could generate report on the basis of hit counts. but you could export the access-list in HTML or CSV format :

Please see the below link:

http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/112925-acl-asdm-00.html#exportace

Regards,

Akshay Rastogi

Thank You Akshay

damilola.adebanjo1 — Mon, 15 Jun 2015 11:55:50 GMT

Thank You Akshay

Hi,You're welcome.If this

Akshay Rastogi — Mon, 15 Jun 2015 12:01:13 GMT

Hi,

You're welcome.

If this answers your query, I would request you to select the appropriate response as the solution for this thread.

Regards,

Akshay Rastogi

It does partially but the

damilola.adebanjo1 — Mon, 15 Jun 2015 12:15:01 GMT

It does partially but the issue is we have more than one ip address configured on an interface and not sure if there is any hit for each ip?

- We assign access-list on

Akshay Rastogi — Mon, 15 Jun 2015 15:30:23 GMT

- We assign access-list on Interface basis, so if any source and destination matches with the access-list configured on interface, it would show a hit.

- If there is any subnet mentioned in access-list, it would not show you hit for separate IP addresses out of that subnet. It would only show hit for access-list matches that traffic on specific interface.

Regards,

Akshay Rastogi

Thanks

damilola.adebanjo1 — Mon, 15 Jun 2015 15:35:13 GMT

Thanks