topic How to analyze Duplicate rules in Cisco ASA .We want to delete duplicate rule in Network Security

How to analyze Duplicate rules in Cisco ASA .We want to delete duplicate rule

Debabrata Majhi — Fri, 21 Feb 2020 15:50:07 GMT

Hi,

How to analyze Duplicate rules in Cisco ASA .We want to delete duplicate rule

Is there any command available to check that duplicate rule.

Re: How to analyze Duplicate rules in Cisco ASA .We want to delete duplicate rule

Bogdan Nita — Fri, 01 Jun 2018 09:47:21 GMT

As far as I am aware there isn't a command like that on the ASA, but it should be fairly simple to write a script to find duplicate lines. There is also the option to use a network security policy management tool that will offer much more than duplicate line check.

HTH

Bogdan

Re: How to analyze Duplicate rules in Cisco ASA .We want to delete duplicate rule

Debabrata Majhi — Fri, 01 Jun 2018 12:46:24 GMT

Thanks Bogdan for your response

I saw there are multiple tools available for Network security management tool like tuffin,alogosec,firemon.

We can go for any one for my requirement right?

Re: How to analyze Duplicate rules in Cisco ASA .We want to delete duplicate rule

Bogdan Nita — Fri, 01 Jun 2018 13:06:04 GMT

For your task yes, just make sure your ASA version is supported.

Re: How to analyze Duplicate rules in Cisco ASA .We want to delete duplicate rule

DanielleITCS — Wed, 25 Jul 2018 04:23:20 GMT

If you're looking into which network security management tool to use for this, you might find real user reviews for Tufin, AlgoSec and other similar solutions on IT Central Station to be helpful.

Users interested in network security management also read reviews for Skybox Security Suite. This user writes, "It's given us more visibility in terms of what are the kinds of configurations that are on [our] devices, and how many of these are stale rules. So it's helped greatly in terms of cleaning up of rules, for sure. And it has definitely given a more secure way of backing up the configuration on these devices." You can read the rest of his review here.

Good luck.