Sample Firewall Commands
The following sample commands define a network object group that uses Forescout eyeSight's naming convention:
object-group network FS_GROUP_3 network-object host 0.0.0.1
Note: You cannot define an empty group. A dummy host 0.0.0.1 is added to the
group.
The following sample code applies access list restrictions to the Forescout network object group defined in the previous command:
access-list 101 deny ip object-group FS_GROUP_3 any access-group 101 in interface outside
The access-list restrictions apply to the hosts in the
FS_GROUP_3 network object group.
Remember to:
- Define all target firewalls in the module configuration pane.
- Copy these object group and access-list definitions to all the firewalls on which you want to implement the action.
minute read