topic Hi,Yes , Finding the Object in Network Security

Removing the Network Objects in Firewall

mahesh18 — Tue, 12 Mar 2019 05:54:34 GMT

Hi Everyone,

I need to do cleanup on the firewalls.

I found few network objects which i need to remove from the firewall are used in many ACL's.

If i delete those Network Objects will then those ACL's will also be deleted automaticall ?

Whats the best way to do this clean up?

Regards

MAhesh

Vibhor Amrodia — Sun, 10 May 2015 04:37:10 GMT

Hi,

You would not be allowed to remove an object-group from the configuration when it is being used in an acl.

I would suggest you to replace the Object groups with the subnet before hand and then proceed with removing the object group.

You can also use the "where used" option on the ASDM to find where that specific Object group is being used.

Thanks and Regards,

Vibhor Amrodia

mahesh18 — Sun, 10 May 2015 04:52:26 GMT

Hi Vibhor,

How can i replace object group with subnet?

I checked where used give me list of ACL lines where it is used.

So i can do this way also find where the object is used then delete the ACL then in the

end i can delete the ACL?

Regards

MAhesh

Vibhor Amrodia — Sun, 10 May 2015 05:08:58 GMT

Hi,

Yes , Finding the Object-groups which are being used and then removing the object-group would be the best way.

Thanks and Regards,

Vibhor Amrodia