topic ASA/ASDM question in Network Security

ASA/ASDM question

adam.zinser — Mon, 11 Mar 2019 19:20:47 GMT

I've got an ASA 5540 (will post revision when I'm in a position to connect) that I often connect to through ASDM (will post revision). Back in June I pulled down the running-config through the GUI option to "show running config in new window", copied the config, and saved it to a .txt file. In the last couple days I followed the same procedure. This is all part of semi-annual reviews.

While the information between the two appears to be the same and accurate, I came across a curious issue. In the June copy of the running-config my interface ACLs call the source and destination objects by their configured object names. In the December copy the running-config ACLs call the src/dst by their IPs, rather than object names. I've not actively upgraded the ASA since June. I have upgraded the IPS module.

Is this a concern? Does anyone know why this would happen?

Re: ASA/ASDM question

Federico Coto Fajardo — Fri, 10 Dec 2010 20:32:07 GMT

Hi Adam,

I don't know if its your case but there's a command ''names'' that will show the running-config with all the names (instead of IPs).

If you issue ''no names'' nothing changes besides showing the configuration with the IPs (instead than the names).

Federico.

Re: ASA/ASDM question

adam.zinser — Fri, 10 Dec 2010 20:34:45 GMT

Does "names" or "no names" show up in the running-config?

Re: ASA/ASDM question

Federico Coto Fajardo — Fri, 10 Dec 2010 20:36:34 GMT

Yes.

And you can also see it (if you're logged in via CLI) doing ''sh run | i names''

Federico.

Re: ASA/ASDM question

adam.zinser — Fri, 10 Dec 2010 20:55:44 GMT

Thanks much!