we have ASA with image 9.1.3 we have given no name command .
source 10.1.1.1
destination 192.168.1.1
port 443 80 21
for NAT rule we have created 3 destination object on ASA with name 192.168.1.1_80 , 192.168.1.1_443 & 192.168.1.1_21
access list only one statement source 10.1.1.1 destination 192.168.1.1_80 port 80 , 443 and 21
If we try to delete object name 192.168.1.1_80 it gives error that it is used in access list .
But if I try to delete 192.168.1.1_443 & 192.168.1.1_21 it doesnt give me any alert and deletes the object but it removes the NAT .
My understanding is unless object is present in access list it will be removed .
Just want to know what is best practice I should add the network object 192.168.1.1_443 & 192.168.1.1_21 in access-list as well .
Thanks for help
