Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello,Does the ASA treat an object-group with a network-object containing a range of IP addresses as a netmask? For example, I can apply this configuration without the ASA throwing any errors though the configuration calls for a 'net mask':object-gro...
Hello,Thank you for your replies. In code version 8.0(5)23, it appears I am able to define a "range" of IP addresses as in:192.168.0.0 192.168.63.255 as opposed to defining a range with a netmask like 192.168.0.0 255.255.192.0.With the "range" of IP ...
Hello,Just to clarify my findings. Applying the range of IP addresses:192.168.0.0 192.168.63.255to a network-object that resides in an object-group applied to an access list that denies this range, the ASA allows it through:Result:input-interface: ou...