Network Object Audit

[DEENA VERAPPAN]

Hi All, looking for some help with exporting network objects from the ASA. The ASDM allows you to view and delete unused objects, is there a command to run in CLI to extract the same information?

Thanks in advance for our help

[balaji.bandi]

I suggest having some good scripts if you able to understand :

https://github.com/PackeTsar/ASA-Cleanup

My suggestion before deleting, disable for 7 days and delete eventually, if this is a big rule base you need to more cautious disable-monitor-delete(iterate, few rules at a time).

[Marvin Rhoads]

I've also used the tool at tunnelsup.com with great results.

https://www.tunnelsup.com/config-cleanup/

If you want a native Cisco tool, CDO offers this functionality but requires a license.