topic Comparing ASA configs in Network Security

Comparing ASA configs

c_hullah1 — Mon, 11 Mar 2019 23:27:00 GMT

Hi All,

I am in the process of re-writing the configuration for an ASA using service groups and a new naming convention. Before implementing the new ACL I would like to ensure that it matches all the rules in the current ACL. Is anyone aware of software which can take two config files and compare them to ensure that they both match up and show any differences in ports allowed and/or IP addresses allowed.

Thanks

Chris

Sent from Cisco Technical Support iPad App

Comparing ASA configs

gouravbathla — Fri, 06 Jul 2012 11:33:32 GMT

You ca use google docs to compare two configuration.

Comparing ASA configs

nkarthikeyan — Fri, 06 Jul 2012 17:56:55 GMT

You can use compare it software which is a freeware of trial version.... which is a very good comparision tool..... it will show a different color codes if there is any difference.... else it will on the same color code....

https://compare-it.software.informer.com/download/

which is 2 mb in size

Comparing ASA configs

jwbensley — Mon, 09 Jul 2012 12:10:46 GMT

Diff is my favourite by a long way

http://en.wikipedia.org/wiki/Diff

Comparing ASA configs

schmidtiii_novice — Tue, 10 Jul 2012 17:06:39 GMT

Hi,

if you use windows as your OS my favorites are the TotalCommander with the "compare by content" function or better

the small graphical open source tool Winmerge (http://winmerge.org/about/screenshots/?lang=en).

Re: Comparing ASA configs

manish arora — Tue, 10 Jul 2012 18:21:52 GMT

Notepad ++, open both file & check line by line using your eyes & brain ;-).

http://notepad-plus-plus.org/download/v6.1.5.html

Manish

Comparing ASA configs

c_hullah1 — Fri, 15 Feb 2013 11:43:17 GMT

Guys,

I found some software which does the job perfectly and would highly recommend!

I performed a full rewrite on one of our complex firewalls using service object groups and a new naming convention to make the rules easier to read but I wanted the services passing through the firewall to remain the same. The following software allowed me to compare two configurations and highlight any problems.

AthenaFirePAC Client

Thanks
Chris

Comparing ASA configs

jocamare — Tue, 19 Feb 2013 03:20:21 GMT

ALT+D using Notepad++