topic In doing some research on in Network Security

Exporting Object Service and Network Groups

pdickerson — Tue, 12 Mar 2019 04:57:28 GMT

Dear TAC, We are in the processing of migrating from multiple ASA5580s to a pair of FWSM1. We access the ASAs via CSM V4.4.0 Service Pack 1 Build 12147 or ADSM V4.1(1). The ASA are running V8.1(2)20 Java Version 1.6.0_35. Thank you to Magnus Mortensen for posting information on how to export the Access List database into CSV format. We are now seeking the steps to take for exporting the Object Service Group and Object Network Group. What are the steps to export these files/databases using either CSM, ADSM, or CLI? Your assistance is greatly appreciated. Thank you in advance, Phil

This is not the TAC - you

Marvin Rhoads — Mon, 20 Oct 2014 12:51:32 GMT

This is not the TAC - you have posted on the Cisco Support Community (CSC). CSC is supported by a worldwide group of people (mostly non-Cisco) who come to ask questions and share knowledge on a volunteer basis. The TAC (Technical Assistance Center) is part of a paid service that you access by opening a case (assuming you have an active support contract).

That said, migrating to FWSM from ASA is not too awfully hard - they syntax is very similar. Cleanup of your objects can be done using tools such as Cisco Security Manager (CSM) or Solarwinds Firewall Security Manager (FSM). You can also do it "by hand" but if you have a large number of groups that can be very challenging.

Thank you for your respond

pdickerson — Mon, 20 Oct 2014 13:30:05 GMT

Thank you for your respond about not being TAC, this was my mistake. While I have this thread going, how can I export these group files from the ASA? We do have CSM to use for clean-up. Can we also use CSM to configure additional interfaces/contexts for the migration? We have a large number of groups that we are splitting the clean-up/migration between three to four individuals on a team.

There is actually a very nice

Marvin Rhoads — Mon, 20 Oct 2014 19:38:16 GMT

There is actually a very nice cleanup tool available at http://www.tunnelsup.com/config-cleanup/. You can paste your configuration in there and it will give you a listing of the unused groups and access-lists along with the commands needed to remove them.

In doing some research on

pdickerson — Wed, 22 Oct 2014 14:45:31 GMT

In doing some research on this, I figured out the following steps to export Networks/Hosts and Services Groups in Cisco Security Manager (CSM).

1. Select Manage from the CSM tools bar

2. Select "Policy Objects..." from the drop down box

3. Select Networks/Hosts from the side bar of Policy Object Manager

4. Select either "Networks/Hosts" or "Services"

5. Hoover mouse pointer over the "Content" column. Right-click to see drop down box.

6. Select "Show Details". If drop down has "Show Summary", then make no selection.

7. Select "Export..." icon

8. Save .csv export file to desire location

There is a Perl command in CSM that can be use to export the same data as referenced in Managing Policy Objects chapter of the User Guide for Cisco Security Manager 4.1.