Good Morning!
I currently manage several ASA firewalls (5585's, 5550's, and a few others) and I'd like to find a better way to parse through configs, particularly for audit purposes. I'll often receive a list of subnets that a customer wants all kinds of information on (which subnets are allowed for PAT/NAT and what firewall rules apply to those subnets, etc). It's always tedious and time-consuming and I'm wondering if there is a tool that could simplify this. I'm not a script wizard myself and would prefer not to have to learn to be one just to get this done, but if that's the only way, I'm willing to crack some books.
Bonus points if the tool doesn't require me to write a SQL query or use regular expressions and even more bonus points if the tool could also have some intelligence like being able to point out ACL overlap or other issues.
Thank you in advance!
Karen