[c-nsp] FW: Tuning rules on a 6500 Cisco Firewall?(FWSM)

[Frank Bulk]

This was posted on the RESNET-L listerv....is there such a tool?
 
Frank

  _____  

From: Resnet Forum [mailto:RESNET-L at listserv.nd.edu] On Behalf Of Pickett,
Eldred
Sent: Tuesday, July 11, 2006 11:40 AM
To: RESNET-L at listserv.nd.edu
Subject: Tuning rules on a 6500 Cisco Firewall?(FWSM)



We currently have over 7000 access-list rules generated by 198 statements.
What's a good way to figure out how to 'condense' these somehow?  Is there
an utility that can give you a list of redundancies?  I can imagine that
going through 7000+ rules manually line-by-line would be a pain.

Thanks for any help.

 

Eldred Pickett

Network Administrator

Housing Information Technology Department(HITO)

University of Michigan Housing

1325 Mary Markley Hall

1503 Washington Heights

Ann Arbor, MI 48109-2015

Phone:(734)-615-5035

Fax:(734)-615-8448

 

___________________________________________________ You are subscribed to
the ResNet-L mailing list. 

To subscribe, unsubscribe or search the archives, go to
http://LISTSERV.ND.EDU/archives/resnet-l.html
___________________________________________________