Merging multiple ACLs lines in one Rule on My FMC server as we can do in other firewall like Checkpoint and PA

[ravindraccie]

Hi Team,

Can we merge multiple ACL line having same destination or port number in FMC as we can do and create one rule out of 10 ACL line in firewall like Checkpoint and PA ?

We recently had migration from Juniper where 15000 rules are creating into 200000 ACL lines.

Regards,

Ravindra

[Seb Rupik]

Hi there,

It has been a while since I used a PA or checkpoint FW so not sure what constructs they now use, but on the FMC look at grouping common ACLs through the use of objects and object groups:

https://www.cisco.com/c/en/us/td/docs/security/firepower/60/configuration/guide/fpmc-config-guide-v60/Reusable_Objects.html

cheers,

Seb.