Networking-Forums.com

Professional Discussions => Security => Topic started by: dlots on December 22, 2015, 10:15:29 AM

Title: Number of ACL lines in a firewall?
Post by: dlots on December 22, 2015, 10:15:29 AM
So what is a standard number of ACL lines once you have extended out all your object-groups and such.

I was curious and looked at one of our FWs and we had 319,330 lines.  How normal is that? (seems like alot to me)
Title: Re: Number of ACL lines in a firewall?
Post by: deanwebb on December 22, 2015, 10:51:56 AM
On a perimeter or data center big bad firewall with contexts and what-not, yes, they can get that big, especially if they got to the point where people couldn't check to see if the object/rule was already there, so they just added another rule. I had one firewall that had 5 complete rules that each governed the same traffic between endpoints.

Get you some firewall management software in action and clean up the rule sets.