topic FWSM- using object-groups in ACL in Network Security

FWSM- using object-groups in ACL

nkariyawasam — Mon, 11 Mar 2019 13:23:39 GMT

Can I use network object-group as source addrese(s) in ACL and just a network ( not a group) as target in the ACL ?

for example:

object-group network TEST

network 1.1.1.0 255.255.255.0

network 2.2.2.0 255.255.255.0

access-list MIX extended permit ip object-goup TEST 3.3.3.0 255.255.255.0

Is this conmfig supported in FWSM ?

Jon Marshall — Thu, 31 Jul 2008 17:42:45 GMT

Yes this should work fine.

Are you having problems with it ?

Jon

nkariyawasam — Fri, 01 Aug 2008 02:51:32 GMT

I have not applied it yet, but going to apply to a live data center. Therefore I just want to make sure that there will not be any issues.