Access-list

[operadornine]

Hi all.

Is there any way i can see in a FWSM how many times an access-list has been used?

Thanks

 

[cisconooblet]

Yes is the answer, but I can't remember if it shows by default in the asdm security policy or not. I'll check out the 6505 tomorrow and see where its at.

CCNA, BCNE, Security+, Network +

 

[operadornine]

thanks man!!!

 

[cisconooblet]

Yes, mine shows hits from the asdm interface. (Yes I still use that). Asdm > Configuration > Firewall > Access Rules. (hits column)

Or from console

show access-list

(hitcnt=XXXX) where XXXX is the number of hits.

CCNA, BCNE, Security+, Network +

 

[operadornine]

cisconooblet,

do you know how can i make a filter to only show , access-list name , ip and hitcnt?

thanks

 

[dgrizzard]

I do not believe the default filtering will get down to that level. You may be able to do this with EEM, but I am not an expert with tcl so I can't say for sure.

 

[cisconooblet]

I may be interpreting your statement incorrectly but is this what you want?

Like :

show access-list AccessListNamehere

or

show access-list AccessListNamehere | include SearchTextHere

CCNA, BCNE, Security+, Network +

 

[dgrizzard]

The way I'm reading it is he wants the output to only be the name, ip and matches...which I do not believe you can do.