Difference between these 2 object groups

Hi Everyone,
Need to understand about object-group network below
when i run the command    sh run object-group id subnet
on fw1  it shows
network-object 10.0.0.0 255.0.0.0
network-object 172.16.0.0 255.240.0.0
network-object 192.168.0.0 255.255.0.0
Same command on firewall 2 shows   
network-object object 10.0.0.0
network-object object 172.16.0.0
network-object object 192.168.0.0
Need to understand if contents of both the firewall are same?
also if i remove config   below from fw2
network-object object 10.0.0.0
network-object object 172.16.0.0
network-object object 192.168.0.0
and add  the
network-object 10.0.0.0 255.0.0.0
network-object 172.16.0.0 255.240.0.0
network-object 192.168.0.0 255.255.0.0
which are same as fw 1  will it make any difference to the fw2?
Regards
Mahesh

Hi,
Had not tested this myself before to I configured this on my firewall
object network TEST
subnet 10.10.10.0 255.255.255.0
object network TEST-2
subnet 10.10.20.0 255.255.255.0
object-group network TEST-GROUP
network-object object TEST
network-object object TEST-2
network-object 10.10.10.0 255.255.255.0
network-object 10.10.20.0 255.255.255.0
access-list TEST extended permit ip object-group TEST-GROUP any
ASA(config)# sh access-list TEST
access-list TEST; 4 elements; name hash: 0xd37fdb2b
access-list TEST line 1 extended permit ip object-group TEST-GROUP any 0x47cc12eb
  access-list TEST line 1 extended permit ip 10.10.10.0 255.255.255.0 any (hitcnt=0) 0x365de33c
  access-list TEST line 1 extended permit ip 10.10.20.0 255.255.255.0 any (hitcnt=0) 0xc98d1b29
  access-list TEST line 1 extended permit ip 10.10.10.0 255.255.255.0 any (hitcnt=0) 0x365de33c
  access-list TEST line 1 extended permit ip 10.10.20.0 255.255.255.0 any (hitcnt=0) 0xc98d1b29
It would seem to work even though it creates an ACL that has overlapping rules but this is nothing new when you deal with "object-group" and ACLs.
I would imagine that as long as you are doing the changes under the same "object-group" then traffic should not be affected. The traffic that is already been allowed through the firewall will keep on going through the firewall and naturally new connections should still match the ACL rule since the same network should be in the ACL all the time since if you first add the new lines and then remove the old.
I would imagine that this "object-group" is probably used in the some "deny" statement in an ACL since it lists all the Private IP address ranges.
You can naturally browse through the configuration to see where this "object-group" is used with
show run | inc
- Jouni

Similar Messages

  • What is the difference between these objects?

    Please, can any one tell me the diffrence between the two objects below, in terms of when to use one or the other.
    This code is from a structs application. The objects are created from same form bean.
    package net.hus.orderbook.action;
    import net.hus.orderbook.form. TakeOrderForm ;
    public class TakeOrderAction extends DispatchAction {
    // showorder action method.
    public ActionForward showOrderForm(ActionMapping mapping, ActionForm wForm, HttpServletRequest request, HttpServletResponse response) {
    TakeOrderForm form = new TakeOrderForm();  // object 1
       TakeOrderForm oldForm = (TakeOrderForm)wForm;  // object 2
    }Thanks
    Cypray

    Hey CyprayDeJava,
    I am not sure of all the intricacies but
    TakeOrderForm form = new TakeOrderForm();
    creates the form using the constructor of the object TakeOrderForm.
    and
    TakeOrderForm oldForm = (TakeOrderForm)wForm;
    creates the oldForm by casting the wForm, which is of type ActionForm, to an TakeOrderForm.

  • Difference between abap object and function

    hi all,
    i read the book on abap object of the difference between abap object and classical abap.
    i know that there is only 1 instance of a specific function group but somehow i still not so clear why subsequent vehicle cannot use the same function. i also can use the do and loop to call the function? if cannot then why?
    hope can get the advice.
    thanks
    using function *********
    function-pool vehicle.
    data speed type i value 0.
    function accelerate.
    speed = speed + 1.
    endfunction.
    function show_speed.
    write speed.
    endfunction.
    report xx.
    start-of-selection.
    *vehicle 1
    call function 'accelerate'.
    call function 'accelerate'.
    call function 'show_speed'.
    *vehicle 2
    *vehicle 3
    *****abap object*******
    report xx.
    data: ov type ref to vehicle,
             ov_tab type table of ref to vehicle.
    start-of-selection.
    do 5 times.
    create object ov.
    append ov to ov_tab.
    enddo.
    loop at ov_tab into ov.
    do sy-tabix times.
    call method ov->accelerate.
    enddo.
    call method ov->show_speed.
    endloop.

    Hi
    Now try this:
    REPORT ZTEST_VEHICLEOO .
    PARAMETERS: P_CAR   TYPE I,
                P_READ  TYPE I.
    *       CLASS vehicle DEFINITION
    CLASS VEHICLE DEFINITION.
      PUBLIC SECTION.
        CLASS-DATA: MAX_SPEED   TYPE I,
                    MAX_VEHICLE TYPE I,
                    NR_VEHICLES TYPE I.
        CLASS-METHODS CLASS_CONSTRUCTOR.
        METHODS CONSTRUCTOR.
        METHODS ACCELERATE.
        METHODS SHOW_SPEED.
        METHODS GET_SPEED EXPORTING E_SPEED TYPE I.
      PRIVATE SECTION.
        DATA: SPEED      TYPE I,
              NR_VEHICLE TYPE I..
    ENDCLASS.
    *       CLASS vehicle IMPLEMENTATION
    CLASS VEHICLE IMPLEMENTATION.
      METHOD CLASS_CONSTRUCTOR.
        NR_VEHICLES = 0.
      ENDMETHOD.
      METHOD CONSTRUCTOR.
        NR_VEHICLES = NR_VEHICLES + 1.
        NR_VEHICLE  = NR_VEHICLES.
      ENDMETHOD.
      METHOD ACCELERATE.
        SPEED = SPEED + 1.
        IF MAX_SPEED < SPEED.
          MAX_SPEED   = SPEED.
          MAX_VEHICLE = NR_VEHICLE.
        ENDIF.
      ENDMETHOD.
      METHOD SHOW_SPEED.
        WRITE: / 'Speed of vehicle nr.', NR_VEHICLE, ':', SPEED.
      ENDMETHOD.
      METHOD GET_SPEED.
        E_SPEED = SPEED.
      ENDMETHOD.
    ENDCLASS.
    DATA: OV     TYPE REF TO VEHICLE,
          OV_TAB TYPE TABLE OF REF TO VEHICLE.
    DATA: V_TIMES TYPE I,
          FL_ACTION.
    DATA: V_SPEED TYPE I.
    START-OF-SELECTION.
      DO P_CAR TIMES.
        CREATE OBJECT OV.
        APPEND OV TO OV_TAB.
      ENDDO.
      LOOP AT OV_TAB INTO OV.
        IF FL_ACTION = SPACE.
          FL_ACTION = 'X'.
          V_TIMES = SY-TABIX * 2.
        ELSE.
          FL_ACTION = SPACE.
          V_TIMES = SY-TABIX - 2.
        ENDIF.
        DO V_TIMES TIMES.
          CALL METHOD OV->ACCELERATE.
        ENDDO.
        CALL METHOD OV->SHOW_SPEED.
      ENDLOOP.
      SKIP.
      WRITE: / 'Higher speed', VEHICLE=>MAX_SPEED, 'for vehicle nr.',
                VEHICLE=>MAX_VEHICLE.
      SKIP.
      READ TABLE OV_TAB INTO OV INDEX P_READ.
      IF SY-SUBRC <> 0.
        WRITE: 'No vehicle', P_READ.
      ELSE.
        CALL METHOD OV->GET_SPEED IMPORTING E_SPEED = V_SPEED.
        WRITE: 'Speed of vehicle', P_READ, V_SPEED.
      ENDIF.
    Try to repeat this using a function group and I think you'll undestand because it'll be very hard to do it.
    By only one function group how can u read the data of a certain vehicle?
    Yes you can create in the function group an internal table where u store the data of every car: in this way u use the internal table like it was an instance, but you should consider here the example is very simple. Here we have only the speed as characteristic, but really we can have many complex characteristics.
    Max

  • Whats the difference between these two queries ? - for tuning purpose

    Whats the difference between these two queries ?
    I have huge amount of data for each table. its takeing such a long time (>5-6hrs).
    here whice one is fast / do we have any other option there apart from listed here....
    QUERY 1: 
      SELECT  --<< USING INDEX >>
          field1, field2, field3, sum( case when field4 in (1,2) then 1 when field4 in (3,4) then -1 else 0 end)
        FROM
          tab1 inner join tab2 on condition1 inner join tab3 on condition2 inner join tab4 on conditon3
        WHERE
         condition4..10 and
        GROUP BY
          field1, field2,field3
        HAVING
          sum( case when field4 in (1,2) then 1 when field4 in (3,4) then -1 else 0 end) <> 0;
    QUERY 2:
       SELECT  --<< USING INDEX >>
          field1, field2, field3, sum( decode(field4, 1, 1, 2, 1, 3, -1, 4, -1 ,0))
        FROM
          tab1, tab2, tab3, tab4
        WHERE
         condition1 and
         condition2 and
         condition3 and
         condition4..10
        GROUP BY
          field1, field2,field3
        HAVING
          sum( decode(field4, 1, 1, 2, 1, 3, -1, 4, -1 ,0)) <> 0;
    [pre]                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   

    My feeling here is that simply changing join syntax and case vs decode issues is not going to give any significant improvement in performance, and as Tubby points out, there is not a lot to go on. I think you are going to have to investigate things along the line of parallel query and index vs full table scans as well any number of performance tuning methods before you will see any significant gains. I would start with the Performance Manual as a start and then follow that up with the hard yards of query plans and stats.
    Alternatively, you could just set the gofast parameter to TRUE and everything will be all right.
    Andre

  • Difference between Business Objects products

    We have add-on applicaion on R/3 System and use it to gerate some reports, queries, analysis with in that application. We are exploring how Business Objects could be useful to enhance this application's output.  We don't have BW system.  This is just on R/3 system only.
    From my limited knowledge about BusinessObjects, I was thinking to decide using one of the following product.
    SAP BusinessObjects Enterprise Premium (User) or
    SAP BusinessObjects Enterprise Prof. for Query, Reporting, Analysis (User)
    I would appreciate if you share your thoughts about difference between these two products.   Is this right product or any other BusinessObject product we should consider.
    Thanks,
    Digesh Joshi

    SAP is offering variety of licensing polices with taking consideration of SAP with NW BI, SAP without NW BI and non SAP but BO customer in mind : Single licensing if someone choose full fledge service offering otherwise there is different segment wise licensing also there. Eg. someone wants to go only for premium service on reporting also feasible but he will not get other services.
    SAP BO portfolio covers four prduct category
    BI Solution ( BI solution enables Advance analytics, dashboard & visualization, query reporting & analysis and reporting)
    GRC Solution (GRC solution detail service offering includes Access control, Global trade services,
    Process control, risk management and Sustainability performance management.)
    EPM Solution (EPM solution detail service offering includes financial consolidation, Financial
    information management, intercompany, planning & consolidation, profitability and
    cost management, spend performance management, strategy management and
    supply chain performance mgt.)
    IM Solution ( IM solution detail service offering includes Data integrator, data quality, data services,
    Text analysis, data insight , data quality link/ connector and Data federator.)
    Hope this will help you.
    Rgs,
    Ambuj Kathuria
    Head ILM Solution, Wipro

  • Whats the difference between these products ?

    Hi,
    can somebody tell me what's the difference between these products ?
    Support Portal - Installations and Upgrades - Entry by Application Group - AP BusinessObjects portfolio:
    -SBOP EDGE BI
    -SBOP EDGE DATA INTEGRATOR (formerly Edge Professional)
       -SBOP EDGE BI WITH DI
    -SBOP EDGE DATA MANAGEMENT (formerly Edge Premium)
       -SBOP EDGE BI WITH DM
       -SBOP DATA CLEAN. PACKAGE EDGE
    -SBOP ENTERPRISE
    Is the DATA INTEGRATOR  and/or DATA MANAGEMENT  inculded in SBOP ENTERPRISE ?
    Thank You
    Martin Sautter

    Hi,
    Normally, BOE / BI installers don't include any of those other EIM components. However, they are bundled in the 'edge' offering, which is licensed differently for smaller enterprises.
    For all DI, DS, DQM topics,  which fall under EIM family, please open a thread over here: http://scn.sap.com/community/enterprise-information-management
    Regards,
    H

  • Difference Between Business Object And Class Object

    Hi all,
    Can any one tel me the difference between business object and class Object....
    Thanks...
    ..Ashish

    Hello Ashish
    A business object is a sematic term whereas a class (object) is a technical term.
    Business objects are all important objects within R/3 e.g. sales order, customer, invoice, etc.
    The business objects are defined in the BOR (transaction SWO1). The have so-called "methods" like
    BusinessObject.Create
    BusinessObject.GetDetail
    BusinessObject.Change
    which are implemented (usually) by BAPIs, e.g.:
    Business Object = User
    User.Create => BAPI_USER_CREATE1
    User.GetDetail => BAPI_USER_GET_DETAIL
    CONCLUSION: Business Object >< Class (Object)
    Regards
      Uwe

  • What is the difference between these two reports MC.1 and MB5L

    Hi
    what is the difference between these two reports MC.1 and MB5L?
    what is the Purpose of each report?
    Material ledger is activated for this plant, we found some amount difference between these two reports, my client accounting department used to compare these two reports while year end/month end closing
    Thanks
    Raju

    MC.1 will give you the report for plant analysis as per plant .
    MB5L report will give you list of stock value as per G/L account wise.

  • Difference between these Thunderbolt cables for an iMac?

    What is the difference between these two Thunderbolt cables for connecting Thunderbolt harddrive docking station to an iMac?
    http://store.apple.com/us/product/MD862ZM/A/apple-thunderbolt-cable-05-m
    http://store.apple.com/us/product/MD861ZM/A/apple-thunderbolt-cable-20-m
    Thanks!

    Along the lines of this topic, does anyone know whether Mini DisplayPort cables are usable for Thunderbolt? Here's one, for example, that's cheaper than Apple's $29 cable:
    http://www.amazon.com/exec/obidos/ASIN/B009NE77TQ/
    I would be concerned about (at least) two things:
    1. Can it handle the speed?
    2. Does it have the right circuit?
    It's possible that if it *seems* to work in a thunderbolt application, you might still run into trouble with intermittent data failure if it's not up to the task.
    Thanks for any thoughts.

  • Difference between the Field Group  and Internal Table.

    Hi all,
    Can anybody tell me the difference between the Field group and Internal table and when they will used?
    Thanks,
    Sriram.

    Hi
    Internal Tables: They are used to store record type data in tabular form temporarily in ABAP programming. Or we can say, it stores multiple lines of records for temporary use in ABAP programming.
    A field group is a user-defined grouping of characteristics and basic key figures from the EC-EIS or EC-BP field catalog.
    Use
    The field catalog contains the fields that are used in the aspects. As the number of fields grows, the field catalog becomes very large and unclear. To simplify maintenance of the aspects, you can group fields in a field group. You can group the fields as you wish, for example, by subject area or responsibility area. A field may be included in several field groups.
    When maintaining the data structure of an aspect, you can select the field group that contains the relevant characteristics and basic key figures. This way you limit the number of fields offered.
    Regards
    Ashish

  • What are the differences between PD objects and PA objects?

    can any one tell me What are the differences between PD objects and PA objects?

    PA is based on Infotypes 0000-0999. PD is based on Infotypes 1000-1999, chief being Objects Infotype 1000. Objects Infotype is the source of different Object Types such as Person, Position, Org Unit etc. You can check that through transaction OOOT.
    Regards
    Lincoln

  • Please  tell me the difference between CREATE OBJECT & CREATE DATA ,statements in CRMTECHNICAL

    Please  tell me the difference between CREATE OBJECT & CREATE DATA ,statements in CRMTECHNICAL

    found it on my own . the best way to do this is use the RetriveLimitedHierTreeCommand  with a search on the taxonomy table.

  • Color differences between these two files?

    Could someone please tell me the color differences between these two files? What are the differences in general of these two files and how do I make a file identical to the blue cancel button?
    I am working with signature pads and the BLUE CANCEL image works, but the other GREEN image does not. Both are 8-bit .bmp files... HELP!

    #1, obviously, would be to connect a mic that doesn't require phantom power.
    And #2 comes with a 6 ft. USB cable, so you may not need a bunch more cables. Maybe just one standard XLR to connect a mic to it.
    Message was edited by: p o'flynn

  • Difference between Business Objects Explorer and Polestar

    Hi all,
    can anyone help me out with the main differences between Business Objects Explorer and Polestar.
    thanks & regards
    immanuel.

    Explorer is the new product name for Polestar.  There have been a few versions of Explorer released since it was called Polestar, but you can find the latest 'whats new' doc here which lists the latest additions:
    http://help.sap.com/businessobject/product_guides/boexplXI32/en/exp32_whats-new_en.pdf
    For one, Explorer now comes in two editions... Standard and Accelerated.  The Explorer Standard edition allows reporting off of Universes, just as the original Polestar product did.  Explorer Accelerated allows reporting off of SAP BWA indexes as well as Business Objects universes.  Both versions now allow uploading of excel files to report off of.  You can export an Information Space to a Webi doc or Excel file.  Users can now save favorite links to an Information Space.  Sorting has been improved as well as graphing functions and overall display.  You'll have to install the latest build of Explorer - "Explorer 3.2 SP1" and compare.  I don't know of a document or matrix that compares Polestar to Explorer.  The two are basically the same product with a number of enhancements added to the Explorer line.

  • Difference between these 2 Laptops: X201 / T410 : Links

    Hello
    I dont see any difference between these 2 :/. ( Power/Display...)
    http://cgi.ebay.fr/LENOVO-THINKPAD-T410-i7-620M-2-66Ghz-4GB-320GB-7-2K-/190456687118?pt=Laptops_Nov0...
    http://cgi.ebay.fr/LENOVO-THINKPAD-X201-i7-620M-2-66GHZ-4GB-RAM-500GB-7-2K-/190456645897?pt=Laptops_...
    Which one is the best?
    Thks

    Hi stevekho,
    Besides obvious differences in the specs, I think it's more like which one best meets your requirement because one is an ultraportable with 12 inch screen and the other performance thinkpad with 14 inch display. X201 doesn't come with optical drive, whereas T410 does. There may be other differences too like internal features etc. in order to find out I would suggest consulting this:- ThinkPad Notebooks
    If I were you I would read the reviews first, and decide based on which one would greatly accommodate my needs, you can read reviews at following links:-
    Lenovo ThinkPad X201 Review
    Lenovo ThinkPad T410 Review
    Hope it helps.
    Maliha (I don't work for lenovo)
    ThinkPads:- T400[Win 7], T60[Win 7], IBM 240[Win XP]
    IdeaPad: U350
    Apple:- Macbook Air [Snow Leopard]
    Did someone help you today? Compliment them with a Kudos!
    Was your question answered today? Mark it as an Accepted Solution! 
      Lenovo Deutsche Community     Lenovo Comunidad en Español 
    Visit my YouTube Channel

  • Whats the difference between these versions of photoshop?

    First of all to make things clear I want to mention this first that I lives in Pakistan and Adobe doesn't support my region so in order to buy the Adobe Photoshop CC I have to contact the authorized resellers, after contacting them and asking for a invoice proposal for Adobe Photoshop CC, they send me several invoice proposals (per user team liscense). But I just got in a trouble as these proposals are offering Photoshop CC different versions so its like kinda making me double mind, i am just confused which to buy as prices are differ too and kinda noticeable. As for making my intentions clear I also wanna mention that I am looking for Single App Liscense i mean i just wanna buy Photoshop CC thats it. But for sure its not gonna be that photography version nor student one. Also i wanna know that whats the difference between these two versions and also tell me the pros and cons.
    So please help me choose which one is better for me as I am really confused with it.
    Here are the links
    Note: You will have to translate these pages into english
    Link one:
    [65224660BA01A12] ราคาพิเศษ จำหน่าย Photoshop CC ALL Multiple Platforms Multi Asian Languages Licensing Subscription Mo…
    Link two:
    [65226001BA01A12] ราคาพิเศษ จำหน่าย Photoshop CC ALL Multiple Platforms Multi Asian Languages Licensing Subscription Mo…
    I've attached screenshots too

    The features in both of the Photoshop CC are identical, there is a difference in price because, the higher priced is the original Photoshop price, the less priced is the promotional priced Photoshop CC eligible only if you have CS3 or later version of Adobe creative suite product.
    Hope this answers your question.
    Regards
    Rajshree

Maybe you are looking for