Apologies if the title doesn't make sense or this is a simple question; I am pretty new to working with Firewall Rules and all. In this case, i am using a Cisco 5516-X and in ASDM v 7.13(1).
What I want to know/do in this case is: I have a department that at certain points of the year has to have a large block of Outbound rules created/enabled. These are all Outbound rules, mostly TCP and UDP, to about 10 distinct IP addresses across 15+ different ports. I was wanting to know if there was a way to create like one Object/Entry that would contain all those rules so that I could go in during their Off-Season and disable those Rules without having to go back and track down 20+ unique Access Rule Entries because some of those rules my Boss does not want open year round.
-Or-
If the above isn't possible, is it possible to create an Access Rule that has multiple IP addresses but they all need the same ports and protocol? That would let me pare down the entries some if I could comma-separate them or some other obvious method of doing so.
[Example of Requested Rule with Made Up Addresses/Ports:]
| Destination IP | Ports | Protocol | Direction |
69.62.122.1/32 128.11.107.0/24 | 80, 443 ,5223, 7731, 60000-60200 | TCP | Outbound |
Otherwise, I suppose I will have to make an Access Rule per address, per port, per protocol and make sure to document them extremely well or work out a way to set up a Schedule or Expiry date!
Again, sorry for such basic questions. I am trying to learn on the fly here and wasn't having much luck searching since I've not mastered all the terminology yet.
Thanks in advance for your time and I look forward to any questions/responses! In the meantime, I'll keep reading up and hope I can figure this out in time!
