"DM_INLINE_" Network,services and groups not being referenced in policies when importing from ASA

gabriel_hernandez — Thu, 15 Feb 2024 19:02:51 GMT

Hi,

Im currently migrating a specific context of an ASA with version 9.6.

The migrated rules reference the actual objects or any other network/service object group which name does not begin with "DM_INLINE".

Is this as intended? im left with a lot of unused object groups named DM_INLINE that should probably get deleted if they are not referenced.

Im using version 1.2.84 of expedition.

Thanks!

Re: "DM_INLINE_" Network,services and groups not being referenced in policies when importing from ASA

dpuigdomenec — Fri, 16 Feb 2024 08:26:24 GMT

Hi @gabriel_hernandez

Thank you for contacting us.

This is how it was designed.

When you use the UI to manage CISCO ASA policies, it automatically creates DM_INLINE objects. However, on the UI, the administrator sees the objects instead of the created group. Therefore, Expedition expands these groups and replaces them with their members.

You can safely delete the DM_INLINE groups, along with any other objects that are identified as not being used in your ASA configuration.

I hope this information is helpful. If you have any further questions, please let us know.

Best regards, David

topic Re: "DM_INLINE_" Network,services and groups not being referenced in policies when importing from ASA in Expedition Discussions

"DM_INLINE_" Network,services and groups not being referenced in policies when importing from ASA

Re: "DM_INLINE_" Network,services and groups not being referenced in policies when importing from ASA