topic Re: APIC-EM ACL Analysis tool in Network Security

APIC-EM ACL Analysis tool

husamabobakr — Tue, 29 Oct 2019 10:36:26 GMT

Dear Community Support,

i have on question about APIC-EM ACL. Analysis tool.

which two values are needed to run the APIC-EM ACL Analysis tool?

is it destination address and source address.

Re: APIC-EM ACL Analysis tool

Seb Rupik — Tue, 29 Oct 2019 10:49:19 GMT

Hi there,

Yes the path trace feature just requires the source and destination IP/ port and transport protocol, with the 'ACL trace' checkbox ticked.

https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/application-policy-infrastructure-controller-enterprise-module/1-6-x/path_trace/user-guide/b_Cisco_Path_Trace_User_Guide_1_6_0_x/b_Cisco_Path_Trace_User_Guide_1_6_0_x_chapter_0111.html

cheers,

Seb.

Re: APIC-EM ACL Analysis tool

husamabobakr — Tue, 29 Oct 2019 10:52:50 GMT

what if i got question like below:
which two values are needed to run the APIC-EM ACL Analysis tool?
1. destination ip address.
2. destination port
3. source ip address
4. source port
5. protocol

what is the best choice would be ( only two choose)

Re: APIC-EM ACL Analysis tool

Seb Rupik — Tue, 29 Oct 2019 10:56:26 GMT

hmmm if it is an exam question I would go for 1 + 3 as the other parameters are deemed optional.

(Although I would argue you need them to properly evaluate an ACL!)

cheers,

Seb.

Re: APIC-EM ACL Analysis tool

husamabobakr — Tue, 29 Oct 2019 11:37:29 GMT

Thanks