topic ASA5510 Object Groups in Network Security

ASA5510 Object Groups

sgoethals1 — Mon, 11 Mar 2019 21:01:54 GMT

Hi Folks,

I have an ASA5510 where I have defined object-groups and then associated them with a specific ACL. Our ISP is pulling their point of presence from where I live and I am force to move to a new ISP. I am in the process of setting up another interface for the ASA5510 to connect to the new ISP.

My questions is can I create a new ACL lets call it new_access_in and use it with the same object groups that I have already defined? I know that I can only have one ACL bound to an interface, and will bind this new ACL to the new interface I am setting up, but I wasn't sure if I could use the same object groups and connect them to a different ACL. I really don't want to have to create new object groups if I don't have to.

Any help would be appreciated.

Thanks,

Scott

ASA5510 Object Groups

Anu M Chacko — Thu, 21 Jul 2011 18:19:08 GMT

Hi Scott,

Yes, you can call the same object-groups in the access-list, as long as there's only 1 access-list applied on that interface in one direction.

Hope this helps!

Regards,

Anu

ASA5510 Object Groups

sgoethals1 — Thu, 21 Jul 2011 18:28:25 GMT

Thank you. That is what I was hoping for. I will have two different ACLs, each bound to a different interface allowing traffic from the outside in, and was hoping that these two ACLs could be configured to use the same object groups.