https://community.cisco.com/t5/network-security/firewall-rulebase-management/m-p/2568083#M225362 <P>Hi,</P><P>The best way to manage the ACL on the ASA device is to use the Object/Object-groups.</P><P>Also , you can separate rules in the configuration using the remarks on the ACL.</P><P>http://www.cisco.com/c/en/us/td/docs/security/asa/asa-command-reference/A-H/cmdref1/a1.html#pgfId-1599158</P><P>Thanks and Regards,</P><P>Vibhor Amrodia</P> Tue, 14 Oct 2014 10:00:10 GMT Vibhor Amrodia 2014-10-14T10:00:10Z https://community.cisco.com/t5/network-security/firewall-rulebase-management/m-p/2568082#M225361 <P>Hi All</P><P>One of the companys I work for has 950 rules on the firewall, would you consider this excessive ?</P><P>The rules are a mix of application, and then rule allowed by site</P><P>How best is it to manage a rulebase, should be manage it by application, and then have all the source / destination nets, and applications in a service group?</P><P>or should we leave it to rules per site etc?</P><P>your comments please</P> Tue, 12 Mar 2019 04:55:21 GMT https://community.cisco.com/t5/network-security/firewall-rulebase-management/m-p/2568082#M225361 carl_townshend 2019-03-12T04:55:21Z https://community.cisco.com/t5/network-security/firewall-rulebase-management/m-p/2568083#M225362 <P>Hi,</P><P>The best way to manage the ACL on the ASA device is to use the Object/Object-groups.</P><P>Also , you can separate rules in the configuration using the remarks on the ACL.</P><P>http://www.cisco.com/c/en/us/td/docs/security/asa/asa-command-reference/A-H/cmdref1/a1.html#pgfId-1599158</P><P>Thanks and Regards,</P><P>Vibhor Amrodia</P> Tue, 14 Oct 2014 10:00:10 GMT https://community.cisco.com/t5/network-security/firewall-rulebase-management/m-p/2568083#M225362 Vibhor Amrodia 2014-10-14T10:00:10Z