topic Re: PIX Access Lists in Network Security

PIX Access Lists

jeff.carr — Fri, 21 Feb 2020 07:42:30 GMT

I finally got around to changing my conduits to access list entries. Should I adjust the order of the access list entries, keeping the busy entries first in line? My assumption is that the access list group is queried in order, similar to an IOS driven device. Thanks for the input.

Re: PIX Access Lists

Patrick Iseli — Wed, 27 Oct 2004 15:16:44 GMT

Yes you should put the more busy ones in the beginning.

By the way there are two interesting features for access-list.

1.) Turbo access-list

TurboACL is a feature introduced with PIX Firewall version 6.2 that improves the average search time for access control lists containing a large number of entries. The TurboACL feature causes the PIX Firewall to compile tables for ACLs and this improves searching of long ACLs.

[no] access-list compiled

See: http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_configuration_guide_chapter09186a00800eb721.html#wp1034390

2.) You can add access-list with a statement, see eample:

[no] access-list [line ] deny|permit ...

sincerely

Patrick

Re: PIX Access Lists

jeff.carr — Wed, 27 Oct 2004 15:43:39 GMT

Excellent.

Thanks for the response, and for the info on 'TurboACL' and 'add ACL with line num'. Will come in handy.

Jeff