topic Re: ASDM - object-group network DM_INLINE_NETWORK_1 in Network Security

ASDM - object-group network DM_INLINE_NETWORK_1

g.meerkoetter — Mon, 11 Mar 2019 14:16:25 GMT

Recent versions of ASDM create

"object-group network DM_INLINE_NETWORK_1"

statements automagically.

I could not find any documentation about this.

Can anybody explain what the purpose of this approach is?

Re: ASDM - object-group network DM_INLINE_NETWORK_1

vwalsh — Fri, 21 Nov 2008 22:29:34 GMT

if you search your config - you should see that it is a grouping of objects. The system creates them for you if you put more than 1 object on a rule.

For example, if your rule is src1 to dest1&2 port xx

Then you will have an object group network dm_inline_network_1 with dest1&2 in it.

if you do another rule the same way with different destinations - it will make another one for you - dm_inline_network_2 & so on.

Re: ASDM - object-group network DM_INLINE_NETWORK_1

Farrukh Haroon — Sat, 22 Nov 2008 12:49:44 GMT

It is meant to simply your configurations.

Regards

Farrukh

Re: ASDM - object-group network DM_INLINE_NETWORK_1

cxsmith — Wed, 13 Jul 2011 15:40:52 GMT

I like using the ASDM but it would be good if you could disable this feature. From experecne I have found that auditors love vague non descriptive commands in firewalls such as (DM_INLINE_NETWORK) This "feature" has forced me to abandon using the ASDM to configure our firewalls.

Message was edited by: Christopher Smith