https://community.cisco.com/t5/network-security/tcp-udp-service-object-groups/m-p/2250249#M348706 <HTML><HEAD></HEAD><BODY><P>Hello Bobby,</P><P></P><P>The object-groups look good,</P><P></P><P>The way to use them will be with ACLs so config looks cleanear and smaller,</P><P></P><P>Regards,</P><P></P><P>Julio Carvajal </P></BODY></HTML> Mon, 03 Jun 2013 19:52:36 GMT Julio Carvajal 2013-06-03T19:52:36Z https://community.cisco.com/t5/network-security/tcp-udp-service-object-groups/m-p/2250248#M348705 <P>Hello,</P><P></P><P>Im trying to keep an ASA config very clean by using service port groups where possible. Check Point does a good job of grouping services by default for me. If you have any examples of what you use please post them up from your configs. This is what I have so far from my 8.4.2 config.</P><P></P><P>object-group service CIFS tcp-udp</P><P> description Microsoft File Shares</P><P> port-object eq 135</P><P> port-object eq 136</P><P> port-object eq 137</P><P> port-object eq 138</P><P> port-object eq 139</P><P> port-object eq 445</P><P> port-object eq cifs</P><P>object-group service httphttps tcp</P><P> port-object eq www</P><P> port-object eq https</P><P> port-object eq 8080</P><P>object-group icmp-type ping</P><P> icmp-object echo</P><P> icmp-object echo-reply</P><P>object-group protocol TCPUDP</P><P> protocol-object udp</P><P> protocol-object tcp</P><P>object-group icmp-type tracert-allow</P><P> icmp-object echo-reply</P><P> icmp-object source-quench</P><P> icmp-object time-exceeded</P><P> icmp-object unreachable</P> Tue, 12 Mar 2019 01:52:37 GMT https://community.cisco.com/t5/network-security/tcp-udp-service-object-groups/m-p/2250248#M348705 Bobby Meador 2019-03-12T01:52:37Z https://community.cisco.com/t5/network-security/tcp-udp-service-object-groups/m-p/2250249#M348706 <HTML><HEAD></HEAD><BODY><P>Hello Bobby,</P><P></P><P>The object-groups look good,</P><P></P><P>The way to use them will be with ACLs so config looks cleanear and smaller,</P><P></P><P>Regards,</P><P></P><P>Julio Carvajal </P></BODY></HTML> Mon, 03 Jun 2013 19:52:36 GMT https://community.cisco.com/t5/network-security/tcp-udp-service-object-groups/m-p/2250249#M348706 Julio Carvajal 2013-06-03T19:52:36Z