ASA bulk object creation

[Bobby Meador]

Does Cisco have a tool that will make the creation of a 500 + network objects easier for a new FW build?

[Jouni Forss]

Hi,

My friends at work would probably come up with some script to easily generate large amount of needed configurations or convert existing configuration to abit different format.

I dont know if there is any tool for this. To be honest I think there arent really that many tools for ASA in general. Then again I havent really even looked for any.

I personally do it the hard way

Lots of copy/paste and manual writing. Call me mad but I like writing the configurations myself.

Are you converting some configurations? Perhaps changing from a different firewall manufacturer or something? Or what will all these objects hold?

- Jouni

[Bobby Meador]

Yea CP to ASA

[Jouni Forss]

Hi,

There is a tool that I have never used but remember it being listed on the Cisco pages download section when downloading new software versions. Maybe its something you are looking for

Here is a screencap of the section of the pages as an example (click to enlarge)

Theres a "Checkpoint Security Conversion Tool"

I dont think it requires any service contract with Cisco.

You could try this link for example

http://software.cisco.com/download/release.html?mdfid=279916854&flowid=4373&softwareid=283748421&release=1.1.1&relind=AVAILABLE&rellifecycle=&reltype=latest

Hope this helps

- Jouni

[Bobby Meador]

Yea Im using that and it helps alot but just wondering if any other scripts or options are available.

Thanks

[Jouni Forss]

Sorry,

I have been only dealing with Cisco firewalls since I started with networking so I am not very good at giving any tips to help you with easily converting/creating the objects.

Havent really had to move between 2 different firewall vendors while I have worked with firewalls. So I dont know what type of CLI configuration format other vendors have. I have been told that when Cisco moved more heavily to use "object" and "object-group" in the ASA configurations that this was something that was already common with other vendor firewalls. But as I said I havent seen the formats others use so I am not sure what kind of work it would do the conversion.

Also I have not have to convert large amount of configurations with scripts myself. I have usually had someone handle that for me inside our company that regularly does that type of work anyway.

- Jouni

[RANT]

I don't think so, but I did an excel spreadsheet to do what you're looking to do.

[tryingtofixit]

This is a work of genius!  Thank you so much for this. it's simple does the trick! no 1,000 lines of python code, or power shell. no "api" to call and reformat.