topic Re: How to remove bulk ACLs from Pix? in Network Security

How to remove bulk ACLs from Pix?

CSCO10662744_2 — Fri, 21 Feb 2020 08:51:39 GMT

We're trying to remove all the ACL's that have hitcnt=0 from at least 3 Pix firewalls.

There are hundreds of lines and it's a waste of time to go through each one of them.

If I weren't so rusty at programming, I could've written a program to do this but it's been many years since the last time I compiled any code in any language...

Does anyone know of a good & efficient way of doing this?

Thanks.

Re: How to remove bulk ACLs from Pix?

m.sir — Wed, 26 Apr 2006 15:39:04 GMT

Try this easy trick:

(assume you want clean ACL 101)

with command

show access-list 101 | i hitcnt=0

you get all access list with hitcnt=0

Copy this output to clipboard

Past this output to Excel (or to other table proccessor) to B column than write NO to A column a copy to all rows that paste all and copy back in firewall config mode

Hope that helps, rate if it does

Re: How to remove bulk ACLs from Pix?

CSCO10662744_2 — Thu, 27 Apr 2006 15:52:58 GMT

This is brilliant!

Thanks.

*I used UltraEdit, which has pretty cool regular expression functionality that does the job too.