topic Hello Scottic1_2,Indeed you in Network Security

ASA 8.3+ - Names versus Objects

Scott Conklin — Tue, 12 Mar 2019 04:37:11 GMT

Hi All, we are in the process of upgrading from ASA version 8.2 to 9.1. I have all of the software upgrade requirements and hardware requirements in place. One thing that I am a bit hung up on is the use of names versus Objects.

I know that names cannot be used in ACLs, but on the other hand, defined Objects cannot be used in routes or to define a peer in a crypto map. Also objects cannot be used in packet captures or packet tracer tests. Obviously we'll need objects for any auto nat hosts

So, I am left wondering how people utilize Names and Objects in the newer versions of ASA code. Do you use both? Or have you moved away from using Names? I have tried googling this topic but have found very little useful information.

Thanks in advance.

Hello Scottic1_2,Indeed you

Laura Zamora — Mon, 11 Aug 2014 23:10:25 GMT

Hello Scottic1_2,

Indeed you are right you will be able to use both names and objects.

Remember the changes after 8.3 will be on access rules and nat rules that will be working with objects, but you can still use names for example on the route.

So the names are not removed after 8.3 just the use changes on certain configurations, most of the configuration when its migrated will stay the same.

Here are 2 good documents about this migration:

https://supportforums.cisco.com/document/48646/asa-83-upgrade-what-you-need-know#Examples_of_Configuration_Changes_in_8.3

http://www.cisco.com/c/en/us/td/docs/security/asa/asa83/upgrading/migrating.html (please check on the Network and Service Object Migration part)

Regards,

Laura