<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic ASA 8.4 Object-Group, syntax query in Network Security</title>
    <link>https://community.cisco.com/t5/network-security/asa-8-4-object-group-syntax-query/m-p/2077791#M395928</link>
    <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;It should be today:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;access-list OUTSIDE extended permit object-group 80443 any object-group WEB_SITES &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Regards,&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
    <pubDate>Wed, 07 Nov 2012 17:26:44 GMT</pubDate>
    <dc:creator>Julio Carvajal</dc:creator>
    <dc:date>2012-11-07T17:26:44Z</dc:date>
    <item>
      <title>ASA 8.4 Object-Group, syntax query</title>
      <link>https://community.cisco.com/t5/network-security/asa-8-4-object-group-syntax-query/m-p/2077790#M395926</link>
      <description>&lt;P&gt;Hi&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I have:-&lt;/P&gt;&lt;P&gt;!&lt;/P&gt;&lt;P&gt;&lt;SPAN style="font-family: courier new,courier;"&gt;object-group network WEB_SITES&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN style="font-family: courier new,courier;"&gt; network-object object &lt;A href="http://www.123.de" target="_blank"&gt;www.123.de&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN style="font-family: courier new,courier;"&gt; network-object object &lt;A href="http://www.123.com" target="_blank"&gt;www.123.com&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN style="font-family: courier new,courier;"&gt; network-object object &lt;A href="http://www.123.eu" target="_blank"&gt;www.123.eu&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN style="font-family: courier new,courier;"&gt; network-object object &lt;A href="http://www.123.fr" target="_blank"&gt;www.123.fr&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN style="font-family: courier new,courier;"&gt; network-object object &lt;A href="http://www.123.nl" target="_blank"&gt;www.123.nl&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN style="font-family: courier new,courier;"&gt; network-object object &lt;A href="http://www.123.be" target="_blank"&gt;www.123.be&lt;/A&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN style="font-family: courier new,courier;"&gt;!&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN style="font-family: courier new,courier;"&gt;sh run object-group service &lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN style="font-family: courier new,courier;"&gt;object-group service 80443&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN style="font-family: courier new,courier;"&gt; service-object tcp destination eq www &lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN style="font-family: courier new,courier;"&gt; service-object tcp destination eq https &lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;!&lt;/P&gt;&lt;P&gt;!&lt;/P&gt;&lt;P&gt;I want to allow any source to access&amp;nbsp; destinaton "WEB_SITES" on the pots in "80443"&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;I tried, &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN style="font-family: courier new,courier;"&gt;access-list OUTSIDE extended permit tcp any object-group WEB_SITES object-group 8044&lt;/SPAN&gt;3&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;and got&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;"ERROR: specified object group &amp;lt;80443&amp;gt; has wrong type; expecting service type"&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;BUT if query the syntax, it asks for?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;access-list OUTSIDE extended permit tcp any object-group WEB_SITES ?&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;configure mode commands/options:&lt;/P&gt;&lt;P&gt;&amp;nbsp; eq&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Port equal to operator&lt;/P&gt;&lt;P&gt;&amp;nbsp; gt&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Port greater than operator&lt;/P&gt;&lt;P&gt;&amp;nbsp; inactive&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Keyword for disabling an ACL element&lt;/P&gt;&lt;P&gt;&amp;nbsp; log&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Keyword for enabling log option on this ACL element&lt;/P&gt;&lt;P&gt;&amp;nbsp; lt&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Port less than operator&lt;/P&gt;&lt;P&gt;&amp;nbsp; neq&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Port not equal to operator&lt;/P&gt;&lt;P&gt;&amp;nbsp; object-group&amp;nbsp; Optional service object-group for destination port&lt;/P&gt;&lt;P&gt;&amp;nbsp; range&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp;&amp;nbsp; Port range operator&lt;/P&gt;&lt;P&gt;&amp;nbsp; time-range&amp;nbsp;&amp;nbsp;&amp;nbsp; Keyword for attaching time-range option to this ACL element&lt;/P&gt;&lt;P&gt;&amp;nbsp; &amp;lt;cr&amp;gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt; access-list OUTSIDE extended permit tcp any object-group WEB_SITES&amp;nbsp; object-group ?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;configure mode commands/options:&lt;/P&gt;&lt;P&gt;&amp;nbsp; WORD&amp;nbsp; Service object-group name for destination port&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;What am I doing wrong? Im sure you can allow destination to a group of ports!!&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt; It's late and my head hurts &lt;SPAN __jive_emoticon_name="wink" __jive_macro_name="emoticon" class="jive_macro jive_emote" src="https://community.cisco.com/4.5.4/images/emoticons/wink.gif"&gt;&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Im on:-&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN style="font-family: courier new,courier;"&gt;sh ver&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN style="font-family: courier new,courier;"&gt;Cisco Adaptive Security Appliance Software Version 8.4(2) &lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN style="font-family: courier new,courier;"&gt;Device Manager Version 6.4(9)&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN style="font-family: courier new,courier;"&gt;Compiled on Wed 15-Jun-11 18:17 by builders&lt;/SPAN&gt;&lt;/P&gt;&lt;P&gt;&lt;SPAN style="font-family: courier new,courier;"&gt;System image file is "disk0:/asa842-k8.bin&lt;/SPAN&gt;"&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Regards,&lt;/P&gt;</description>
      <pubDate>Tue, 12 Mar 2019 00:20:05 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/asa-8-4-object-group-syntax-query/m-p/2077790#M395926</guid>
      <dc:creator>smoothnetworks</dc:creator>
      <dc:date>2019-03-12T00:20:05Z</dc:date>
    </item>
    <item>
      <title>ASA 8.4 Object-Group, syntax query</title>
      <link>https://community.cisco.com/t5/network-security/asa-8-4-object-group-syntax-query/m-p/2077791#M395928</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;It should be today:&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;access-list OUTSIDE extended permit object-group 80443 any object-group WEB_SITES &lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Regards,&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Wed, 07 Nov 2012 17:26:44 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-security/asa-8-4-object-group-syntax-query/m-p/2077791#M395928</guid>
      <dc:creator>Julio Carvajal</dc:creator>
      <dc:date>2012-11-07T17:26:44Z</dc:date>
    </item>
  </channel>
</rss>

