topic Re: ACL-merging in Network Security

ACL-merging

tamas.horvath — Fri, 21 Feb 2020 16:37:26 GMT

Hi All,

I'm looking for a tool which can merge two access control list.

Each ACL contains more than hundred rules so merging shouldn't be done manually because this has a large margin of error.

I want the two set of rules to be merged into a third ACL.

How can it be done?

Thank you in advance,

Tamas

Re: ACL-merging

collin_clark — Wed, 02 Jan 2019 15:06:28 GMT

Import them both into Excel, remove the duplicates and there is your third ACL.
https://support.office.com/en-ie/article/filter-for-unique-values-or-remove-duplicate-values-ccf664b0-81d6-449b-bbe1-8daaec1e83c2

Re: ACL-merging

Sheraz.Salim — Wed, 02 Jan 2019 15:10:44 GMT

as far i know there is no tool like this. for this work to be done. you need to create separate object with group, network, services.

the only solution is a manual. where you have to extra caution of making issue.

Re: ACL-merging

Marius Gunnerud — Thu, 03 Jan 2019 11:43:25 GMT

Another option is if you have a spare ASA to lab on, you can copy one ACL to the lab ASA and then copy the ACL entries of the second ACL into the first ACL. Then copy that ACL back to the production ASA.

Re: ACL-merging

tamas.horvath — Fri, 11 Jan 2019 14:36:21 GMT

Thanks. Maybe an excel macro could solve my problem.

Re: ACL-merging

Sheraz.Salim — Fri, 11 Jan 2019 14:37:53 GMT

just to add on more step if you dont have a physical ASA you can test them on ASAv too 🙂