Check which ACLs are in use

[Julio Engels Urena Martniez]

Hi,

Im currently managing a Cisco ASA 5520, that was setup for someone in the pass and I working with it now.

I move from an other firewall's vendor to Cisco ASA and is a litter different.

I want to know where to start with Cisco ASA to know what's going on on this firewall and also I want to know which access list are in use.

I notice that there are many access list, but I dont think all are in use, how can I check this?

We are runing Internet / VPN / DMZ / static routes / some firewall policies (all any to any) / NAT / AAA / etc

Any help?

Thanks in advance.

[Julio Carvajal]

Hello,

For the ACLs on the VPN

show run map

-Here look for the commands that says crypto map name # match address ACL_NAME

If you are running a version lower than 8.3 while doing show run nat or show run static you could also see ACLs being use

For ACL on firewall interfaces

show run access-group

-Then you will get the name of the ACLs applied to each of the interfaces

Show run aaa

-If you see an aaa authentication match ACL_NAME then you will be running Cut-Through Proxy

Now that you have the ACLs, just do

show run access-list Name_of_ACL

Looking for some Networking Assistance? 
Contact me directly at jcarvaja@laguiadelnetworking.com

I will fix your problem ASAP.

Cheers,

Julio Carvajal Segura
http://laguiadelnetworking.com