Unused objects in my Firewall configuration

[Michael Schindler]

I have just taken over the administration of a network and I am trying to clean up a number of things.  On the ASA's there are a number of objects created that when I right click on them and select "Where used" I get the message:

"XXXXXXX is not used anywhere"

So my basic question is; can I delete this object?

More generally, is an object that is not part of any rule providing any functionality?

[thiland · Accepted solution]

If an object or object-group isn't part of a NAT, ACL, etc. then it can be removed.

At the CLI you can verify with a:

show run | i <object name>

If you get more than 1 result (the object itself), then it's used by something.

You might want to cross-reference against this tool as well:

http://www.tunnelsup.com/config-cleanup/

[Michael Schindler]

Thanks for taking time to answer my simple question!!!