Concerning ASA 5505 and a strange behaviour with Network Objects

[itnoc]

Hi,

I've just recieved a Cisco ASA 5505 to replace my old checkpoint firewall, and I have a problem (maybe it's not really a problem) with computer objects.

On my configuration, I have 4 subnets :

• INTERNAL : 192.168.100.0/255.255.255.0
• DMZ_1 : 193.XXX.XXX.1 - 127 / 255.255.255.128
• DMZ_2 : 193.XXX.XXX.130 - 190 / 255.255.255.192
• OUTSIDE : 193.XXX.XXX.240 - 254 / 255.255.255.240

My interfaces are set, everything seems to be normal, except when I try to create a Network Object, like a simple computer.

If I try to declare an host in any side, I must set 255.255.255.255 as subnet mask. Any other setting will fail with a pop-up. I made a screenshot attached to this post.

Is this a normal behaviour ? Do I do something wrong ?

Thanks for your help

[Jon Marshall]

removed because i was talking rubbish

Jon

[Jon Marshall]

Raphel

Ignore previous post.

What is happening is that you either specify a subnet or a host but you can't specify a host and then use the subnet mask for the subnet. You need to specify the subnet mask for the host ie. 255.255.255.255

So if you only want to specify a host then yes you need to use 255.255.255.255 and this is normal behaviour.

Jon