How find all un-used/in-active ASA rules

Hello,
I am tasked to identify all un-used, in-active, and idle rules in Cisco ASA firewalls.
     I have access to CSM. But in CSM, I do not know how create such a report. I would be grateful if someone can help to create such a report. 
     If CSM does not support such a report, I will be grateful if someone can help to use CLI to figure out such rules.
thanks in advance
Bo              

Hi,
Do u mean the ACL rules which is inactive/idle for a long time????
If it is ACL rules then sh access-list | in (hitcnt=0) and check. But this may not conclude that it is invalid. Because the endusers uses that flow on a rare cases also. Be sure on this one.
for interface ACL's you can check sh access-group and check how many ACL's configured and used on interfaces.
If it is used for VPN or NAT then you need to check NAT configurations and VPN configurations with the rule name.
Or best way you can take the sh run and find ACL name which is used or not used. like if it is an valid ACL then apart from the ACL lines it should be mapped somewhere either in access-group/NAT/VPN configs.
By
Karthik

Similar Messages

  • Find all tables used in a stored procedure

    Hi,
    I have a requirement where i have to find all the tables used in a stored procedures from different  databases.
    Ex: i have a stored procedure where i use few tables from MASTER database and some from STAGE database.When i have written a query to find all tables used in the stored procedure, i am getting only those database table where i run the query and procedure
    exists.
    I have stored procedure SP1 in Master database, but i use the tables from both master and stage.
    When i run this, i am getting the tables only from Master database but not from stage. i hope my requirement is clear.
    I am trying to find all the tables from all databases used by a stored proc.
    ;WITH stored_procedures AS (
    SELECT 
    o.name AS proc_name, oo.name AS table_name,
    ROW_NUMBER() OVER(partition by o.name,oo.name ORDER BY o.name,oo.name) AS row
    FROM sysdepends d 
    INNER JOIN sysobjects o ON o.id=d.id
    INNER JOIN sysobjects oo ON oo.id=d.depid
    WHERE o.xtype = 'P')
    SELECT proc_name, table_name FROM stored_procedures
    WHERE row = 1
    ORDER BY proc_name
    Please advice

    Your question is not entirely clear. You need to run the query on different databases.
    You may find this blog post helpful
    How to get information about all databases without a loop
    Check the last script in that blog post and modify to your particular purpose.
    For every expert, there is an equal and opposite expert. - Becker's Law
    My blog
    My TechNet articles

  • Find all tables used in a set of programs

    I need to find a list of all tables used in all Z programs. Originally I was thinking of getting a list of programs from table TRDIR, using READ REPORT for each one and then using Regex to get a list of tables used in SQL statements. However getting the regex working appears to be more complicated than first expected so I'm looking for other possibilities.

    Use SAP standard program RPR_ABAP_SOURCE_SCAN and in the selection parameters
    Program Name = Z*
    Find String = SELECT
    and execute

  • How to find all pages using table

    Hi,
    Can someone help me to find list of APEX pages in an application that as based on a particular database table.
    Basically, I need to find the page names that needs to be modified on a change on database table structure.
    Thanks in advance
    Aali

    The APEX 'Database Object Dependencies' report can help too
    From the APEX Builder
    Home>Application Builder>Application 102>Application Reports>Shared Components>Database Object Dependencies
    Varad

  • Please help.. me and my hubby both have the iphone 4 and use the same email address and itunes account. I got mine yesterday and activated it to find all my husbands contacts on my phone. I deleted them and he lost all his contacts. How can we stop this !

    Hy please help...
    My husband purchased  an iphone at xmas and evrything was fine until i purchased 1 yesterday . We both use the same email address which is linked to our itunes account (ithink) I registered mine yesterday and all my husbands contacts came on to my phone, so i deleted them and he lost them all on his phone :-( now if he adds or deletes anything i get it or the other way round please please help

    If you are saying that you both have iCloud accounts and use the same icloud ID, then yes, the contacts will be deleted.  The idea is that all devices using the same icloud ID are kept in sync.  You need to use different IDs.  You can keep the same iTunes ID so you can share the songs and apps.  But use different icloud IDs.

  • User being removed from Domain Admins...how to find all servers his account is being used.

    We have a user that is being removed from IT (more like being forcefully demoted) and our owner still finds him valuable in other departments. My challenge is to find all servers that he may be using his account locally on (as a service or added to a local
    admin group). It hasn't happened yet, but we need to be prepared to say we know all the servers his account is on when the owner demotes him.
    I'm hoping someone has an approach to this that doesn't include going through tons of Event Viewer Security logs. We do have System Center Configuration Manager and Operations Manager 2012 w/ SP1, but the guy that is responsible for those is the guy we are removing
    and none of us are aware on how to use the possible tools that those have. If you feel that those would do the trick then please point me to a "how to" and I'll try to learn on the fly. Otherwise I'll take any other suggestions.
    ~Rick

    Hi Rick,
    Based on my research, you can filter events logs based on user name and event ID:
    Advanced XML filtering in the Windows Event Viewer
    http://blogs.technet.com/b/askds/archive/2011/09/26/advanced-xml-filtering-in-the-windows-event-viewer.aspx
    Best Regards,
    Amy

  • How can we find all the available  user-exits in sap without using SMOD?.

    How can we find all the available  user-exits in sap without using SMOD?.

    Hi,
    Please check this links for user exits list.
    http://www.planetsap.com/Userexit_List.htm
    http://www.easymarketplace.de/userexit.php
    http://www.sap-img.com/ab038.htm
    Regards,
    Ferry Lianto

  • TS1702 how do i find all passwords i have used with my apple id

    how do i find all passwords that i have used for my apple id

    Other than remembering them, you can't.

  • How to find all the parts used from stock for 1 machine

    Dear Sap community,
    I'm trying to find all the spare components that are used for 1 specific machine.
    If I look in the work orders under components it only gives the components that are orderd.
    But I would like to find the components that come out of stock. I asked the stockkeeper and he said he writes it all in the work orders but we can't find it back.
    It would be nice to just find it on the work order but it would be easier if I could just choose a machine and then find all the spare parts used from stock.
    So my question is can I find all the spare parts used for 1 machine or just find the spare parts in the work order?
    Thank you for any help you can provide in this situation,
    Michael Claes

    Hi,
    In addition to puneet's information:
    Training and Event Mgmt  infotypes:
        Prices (Infotype 1021)
        Availability Indicators (Infotype 1023)
        Capacity (Infotype 1024)
        Depreciation Meter/Validity (Infotype 1025)
        Business Event Info (Infotype 1026)
        Site-Dependent Additional Info (Infotype 1027)
        Address (Infotype 1028)
        Business Event Type Info (Infotype 1029)
        Procedure (Infotype 1030)
        Mail Address (Infotype 1032)
        Name Format (Infotype 1034)
        Schedule (Infotype 1035)
        Costs (Infotype 1036)
        Billing/Allocation Info (Infotype 1037)
        Business Event Blocks (Infotype 1041)
        Schedule Model (Infotype 1042)
        Demand (Infotype 1060)
        Web Link (Infotype 1061)
        Knowledge Link (Infotype 1062)
        Business Event Group Info (Infotype 1063)
    Thanks,
    Anil.G

  • How do i find who is using my wifi?

    I had a day this month where almost 28gb was used of my download and can't epxlain it, how do i find out who uses my wifi?

    You cannot see that readily from your Mac, but you should be able to tell by logging into your wifi router.  It likely uses a web page for administration, and from that, you should be able to find a list of all connected devices.  To see actual activity, you may need to access or enable logging, if your router supports it.
    Check your router's manual for how to access those sorts of admin features.

  • HT201472 If my ipod was stolen, how can I figure out if the find my ipod app is activated

    If my ipod was stolen, how can I figure outg if the find my ipod app is activated.

    - If you previously turned on FIndMyiPod on the iPod in Settings>iCloud and wifi is on and connected go to iCloud: Find My iPhone, sign in and go to FIndMyiPhone. If the iPod has been restored it will never show up.
    - You can also wipe/erase the iPod and have the iPod play a sound via iCloud.
    - If not shown, then you will have to use the old fashioned way, like if you lost a wallet or purse.
    - Change the passwords for all accounts used on the iPod and report to police
    - There is no way to prevent someone from restoring the iPod (it erases it) using it.
    - Apple will do nothing without a court order                         
    Reporting a lost or stolen Apple product                                        
    - iOS: How to find the serial number, IMEI, MEID, CDN, and ICCID number

  • I have just owned a macbook pro and trying to learn things since i have all along used windows laptop. My first question is : when there are two files i am working together, one above the other on screen, how you switch over between the two with key ?

    I have just owned a macbook pro and trying to learn things since i have all along used windows laptop. My first question is : when there are two files i am working together, one above the other on screen, how you switch over between the two with key ?

    Hi...
    Mac OS X keyboard shortcuts
    Control-F4
    Move focus to the active (or next) window
    Shift-Control-F4
    Move focus to the previously active window
    By the way...  since you are new to Mac, click a clear space on your Desktop. You should see "Finder" top left corner of the screen in the menu bar.
    Click Help then click Help Center
    As an example type in    keyboard shortcuts
    You can use the Help menu for almost any application on your Mac.
    Apple - Find Out How - Mac Basics
    For held switching from PC to Mac >  Apple - Support - Switch 101

  • When I create a New Folder (on the desktop or in Finder), the system uses the Generic Document Icon instead of the Generic Folder Icon. How can I change this back?

    When I create a New Folder (on the desktop or in Finder), the system uses the Generic Document Icon instead of the Generic Folder Icon. How can I change this back?
    All of a sudden I noticed that most of the folders on my computer were no longer using the folder icon, but the generic document icon. I had to manually change back the icon being used by opening Get Info for each folder and copying and pasting the generic folder icon from some folders that remained unchanged. Now whenever I create a New Folder (right click -> "New Folder"), the icon that shows up is the generic document icon (white page with top right corner turned down). And I have to manually change it so it shows up as a folder in Finder or on my desktop. I don't know why or how this switch happened. All of the folders now on my computer look ok, but I need to change the default so when I create a New Folder it uses the correct icon.
    I have also Forced Relaunch of my Finder and rebooted the system. I downloaded Candybar but am not sure what will fix anything, so I haven't proceeded.
    Anyone know how I can do this? Thanks.

    Anyone?

  • How to get a list of file paths for all files used in a project

    I have a project in Premiere Pro CC which has a large number of bins.  A sequence in one of these bins uses files from other bins.  I am trying to find the locations of all each of the files used  in the project.
    1)  Obviously I can select each clip in the timeline and show in finder, but there a lot of clips
    2) The video usage associated with each file in the project would help.  However
               1.  I haven't found a way to display only clips that have video useage if all of the bins have not been expanded.
              2.  Video usage  shows usage for all sequences, so one would have to manually check the pull down for each file to see if it is used in the sequence in question.
    3) I tried exporting the project to final cut pro xml.  The path url gives me the information that I need.  For some reason, however, when I do the export only one clip's information is there, not the information for all of the other clips in the project.
    4) I tired an export for speedgrade and all of the file names are there.  However the paths are not. 
    Basically I want to find all of the files in the project and relocate them to a specific folder for that project.  There's got to be a way to do this but I'm not seeing it ....

    Thanks for the suggestion concerning the file path.  And certainly it would have been nice to have done this before beginning.  However this is a project that has been around for quite a while, and the files have been moved into different bins.  And now the project sequence is being revised.
    So the problem is, worded slightly differently, how can I search all of the bins for the files that are used just by this sequence, ignoring the files which are used by other sequences?  Or, how can I get a list of the file paths of the files that are used in the sequence?

  • How can I find all exclamation marks in my iTunes without clicking on each song?  Is there a way to delete all instead of one at a time?

    How can I find all exclamation marks in my iTunes without clicking on each song?  Can they be deleted all at once instead of one song at a time?

    Lost & Found
    Create a playlist called Found, select everything in Music and drag it into the Found playlist (it may take some time to count the tracks that are to be dropped). Create a smart playlist called Lost matching All the rules Playlist is Music and Playlist is not Found. Your lost tracks will be in this playlist.
    Optional: It depends a bit on why things aren't where iTunes expects to find them but if they are in sensible Artist & Album folders in some common location then my FindTracks script should be able to reconnect them to iTunes. FindTracks uses some fuzzy matching routines and searches for multiple potential locations. For more details see this thread. Once you have repaired the tracks that can be found you can drag the contents of the Lost playlist into Found which will update things.
    Or, you can simply delete all the tracks in the Lost playlist with Ctrl-A to select them and then Shift-Delete to delete.
    tt2

Maybe you are looking for

  • Unable to create IDOCs after client copy

    I'm unable to create IDOCs after a client copy.  I receive a SAPSQL_ARRAY_INSERT_DUPREC or insert of duplicate rows ABAP dump. Does anyone know what how to fix this.  Thank you in advance. Runtime Error          SAPSQL_ARRAY_INSERT_DUPREC Except.    

  • Can't HotSync Mac OS 10.5.6 with Palm Z22

    I have been trying to sync my computer and my palm all day today. It will not complete the sync. I have completely reset my Palm (Hard Reset) to see if that would help, but nothing. The Palm keeps freezing on Synchronizing Expenses. It cannot get pas

  • Partner number of Purchasing organisation and group

    Hi I have to find the partner number of the Purchasing organisation and group to which a user is assigned. I have the partner number of the user. I know that we can view this in PPOSA_BBP, I want to write a code to fetch this. I have found the purcha

  • How do I trick iTunes into thinking imported songs are purchased?

    MOST of my library is imported, and I really bugs me when when I can't listen to it in the store, only in my library. So I was wondering if there was any way to trick iTunes into think it is. I am running ios 7.1.1 on an iPod 5 16gb.

  • HT4098 Viewing of all in app purchases

    So i would like to see all of my in app purchases. How do i do this ?