PIX ACL's and translation of well known port-numbers

[thomas_kuhn]

Hello,

i have a question to PIX-Firewall, if I configure :

>>>

access-list inside permit tcp 10.10.10.10 255.255.255.255 gt 1023 10.20.20.20 255.255.255.255 eq 23 <<<

a show access-list inside has the result :

>>> access-list inside permit host 10.10.10.10 gt 1023 host 10.20.20.20 eq telnet <<<

my question is, is it possible to supress translation of well known port-numbers and 32-bit netmask to "host"

Thanks in advance

[yusuff]

No, it is not possible. if you use well-known ports in your ACL, they will be replaced with the respective keyword translation. Same goes for /32 replaced with host keyword.

I don't see any objective why you would want to retain it either.

R/Yusuf

[bs0000554]

Why you need to disable this? Its better for us..

[thomas_kuhn]

i just want to see what i have configured, in our environment there are round about 300 rules (and daily more) rules in PIX firewall, translation from /32 mask to "host" need an aditional step to sort rules-base file, and do you always remember what the translation of 1352 is, lotusnotes, LOTUSNOTES, LNNOTES ... , same for ldap, ldaps, and in the future perhaps (with new releases) also OpenFT, SAP, and so on .