ASA - Command to find which ports are open

[Robert Ho]

hey all, is there a command to quickly determine which ports are opened for a specific ip? it's a large config and the ip exists under different acl's and object groups. thanks, robert.

[RicheeJJJ_2]

sorry. No there really isn't. It's a series of commands.

show run | i 10.1.1.1

Will show you some of the instances of where that IP address. But if you see it listed as a name or a network-object then you're going to have to search for it by that name and that object group name as well.

[Robert Ho]

yes, i am really familiar with | piping through the config. it does not help when the ip is part of an object-group.