topic Is using the Object-Group will reduce the processing effort ? in Network Security https://community.cisco.com/t5/network-security/is-using-the-object-group-will-reduce-the-processing-effort/m-p/1396039#M750155 <P>Is using the Object-Group will reduce the processing effort ?</P><P></P><P>and is there any documents for ACL design consedieriation ?</P><P></P><P>Thanks a lot in advance.</P> Mon, 11 Mar 2019 17:04:23 GMT fadi4alpha 2019-03-11T17:04:23Z Is using the Object-Group will reduce the processing effort ? https://community.cisco.com/t5/network-security/is-using-the-object-group-will-reduce-the-processing-effort/m-p/1396039#M750155 <P>Is using the Object-Group will reduce the processing effort ?</P><P></P><P>and is there any documents for ACL design consedieriation ?</P><P></P><P>Thanks a lot in advance.</P> Mon, 11 Mar 2019 17:04:23 GMT https://community.cisco.com/t5/network-security/is-using-the-object-group-will-reduce-the-processing-effort/m-p/1396039#M750155 fadi4alpha 2019-03-11T17:04:23Z Re: Is using the Object-Group will reduce the processing effort https://community.cisco.com/t5/network-security/is-using-the-object-group-will-reduce-the-processing-effort/m-p/1396040#M750166 <HTML><HEAD></HEAD><BODY><PRE __jive_macro_name="quote" class="jive_text_macro jive_macro_quote"><P>fadi4alpha wrote:</P><P></P><P>Is using the Object-Group will reduce the processing effort ?</P><P></P><P>and is there any documents for ACL design consedieriation ?</P><P></P><P>Thanks a lot in advance.</P></PRE><P></P><P>Using object-groups does not reduce the processing effort because the firewall still has to expand the object-group into it's individual line entries. It's more a way of organising the config from an admin perspective.</P><P></P><P>ACL design, not really documents but the key thing is to put the entries that are hit the most at the top as the acl entries are processed top down, one at a time.</P><P></P><P>Jon</P></BODY></HTML> Tue, 02 Feb 2010 16:55:22 GMT https://community.cisco.com/t5/network-security/is-using-the-object-group-will-reduce-the-processing-effort/m-p/1396040#M750166 Jon Marshall 2010-02-02T16:55:22Z