topic Service Objects and Groups in ASDM in Network Security

Service Objects and Groups in ASDM

Kevin Melton — Mon, 11 Mar 2019 17:43:12 GMT

I have been using ASDM for some time

now. I have always had a quesiton about what exactly Service Groups are that are built using the Service type TCP/UDP vs. ones that are specifically TCP or UDP. Out of fear I have always built Service Groups for TCP only or for UDP only.

Lets say I need a Service Group that needs ports 102, 20000, and 21000 in it, but I am unsure if the ports need to be UDP or TCP. If I create the Service Group using type TCP/UDP, will it allow both TCP and UDP in for the specific port?

Thanks

Kevin

Re: Service Objects and Groups in ASDM

Jon Marshall — Mon, 10 May 2010 17:26:52 GMT

k-melton wrote:

I have been using ASDM for some time

Thanks

Kevin

Yes it would. In fact that is exactly what service objects are used for ie. so you don't have to create 2 separate groups, one for TCP and one for UDP. So you would configure "object-group service tcp-udp" and then simply use service-objects to add your ports.

Jon

Re: Service Objects and Groups in ASDM

Kevin Melton — Mon, 10 May 2010 18:03:17 GMT

Jon

Thanks for the quick response!

Kevin