How to build ACL from syslog entries on permit any any log

[vince_mele]

We have several user subnets that we want to start securing but no one knows all the ports and such that are currently in use. We dont have the time to open everthing up one by one over the next month or so. We have put a permit any any log and have started logging all the connections and such.

Is there a utility or an easy way to condense all this connection information in the syslogs and build an ACL from it?

[Ramraj Sivagnanam Sivajanam]

Hi Bro

This is a very good question. Many have asked me the same thing too :-) For starters, you could just use Cisco ASDM. Please do refer to this URL for further details http://www.ciscopress.com/articles/article.asp?p=1552963&seqNum=6

P/S: If you think this comment is useful, please do rate them nicely :-)