Archive

Posts Tagged ‘FW’

Cisco ACL Parser v0.04

December 22nd, 2010 3 comments

Greeting all,
Here is a new version of the ACL parser. I fixed a lot of issues with this script. The object groups are now expanded for the PIX and ASA. I have added the attributes for ACL entries for log level, time, and inactive state. I enhanced the remark feature also. The script was verified and test by Anthony, who contacted me after my initial public release v2. Anthony ran the script against an ASA 7.x with ACL that totals over 5000 lines. Here a quote from his response after testing:

“This is truly a parsing masterpiece. This did exactly what I needed and meets all of my requirements perfectly. Had no issues with any of the lines in the over 5000 lines of a single ACL that I ran through it, wonderful! Save me days of work! Seriously!!! Thanks a million. I know this wasn’t easy… especially since your script more than doubled!!”

I hope that you can use the script as well, I know this saves me a lot of time when auditing a router or firewall. In the next release I hope to add support for object groups with IOS ACL’s, and a column for description of how the ACL is applied. If you have any feedback please feel contact me anytime.

Well as luck would have it, there was a small spelling issue. I fixed the script and have here is the updated script.
acl2csv.0.04.pl