ASA ACL entry: 1 source with 2 destinations?

[jmaxwellUSAF]

Hi.

GIVEN:

"access-list Outside_access_in extended permit tcp 170.100.1.0 255.255.240.0 object OBJECT1 object-group GROUP2"

Does the above mean "Permit tcp from source 170.100.1.0/20 to object OBJECT1 and object-group GROUP2"?

Thank you!

[Rob Ingram · Accepted solution]

@jmaxwellUSAF OBJECT1 = the destination network object and GROUP2 = the group of services (tcp services).

So permit 173.245.48.0/255.255.240.0 to OBJECT1 networks using the tcp services in GROUP2.

[MHM Cisco World]

no the second object-group is for service (L4 port) not for IP.