11-17-2010 07:50 AM - edited 03-11-2019 12:10 PM
Hi,
We have a firewall policy with a *lot* of address objects which has been migrated from another (non-cisco) firewall platform.
Many of our firewall administrators are familiar with the pre-ASA 8.3 ASDM functionality which allowed you to search for addresses in ASDM (in the addresses tab to the right of the policy) by IP address. With the latest version of ASA and ASDM where we now create objects for addresses, ranges, networks etc rather than using the old "name" method - it doesn't seem possible to filter the addresses window by IP address - only the network name.
So if I want to find the object name for an IP address e.g. 10.1.1.1 it doesn't seem that you can do this in the GUI.
The only way that I have found to find the information is via the CLI, by typing "sh run object in-line | inc <ip address>" which of course can be done via the Command Line tool in ASDM but it seems like a bit of a cludge and non-user friendly to have to do this.
Does anyone know whether this should be possible in the filter field or whether there is another way of accomplishing the same task in the GUI?
Thanks
Paul
Solved! Go to Solution.
11-17-2010 09:03 AM
Hi Paul,
This should work for you, but there is a bug that prevents you from filtering on IP address in ASDM 6.3 with ASA 8.3:
CSCtg99616 - Network object lookup by IP address does not work
The bug will be fixed in the next ASDM release. Until then, filtering by name or using the CLI is the way to go. If you have an active support contract, you can open up a TAC case and ask for an engineering build of ASDM where this bug is fixed.
Hope that helps.
-Mike
11-17-2010 09:03 AM
Hi Paul,
This should work for you, but there is a bug that prevents you from filtering on IP address in ASDM 6.3 with ASA 8.3:
CSCtg99616 - Network object lookup by IP address does not work
The bug will be fixed in the next ASDM release. Until then, filtering by name or using the CLI is the way to go. If you have an active support contract, you can open up a TAC case and ask for an engineering build of ASDM where this bug is fixed.
Hope that helps.
-Mike
11-17-2010 09:08 AM
Thanks Mike
Glad to hear it will be fixed - I'll keep an eye out for the next release.
Regards.
Paul
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide