12-36
User Guide for Cisco Security Manager 4.4
OL-28826-01
Chapter 12 Introduction to Firewall Services
Managing Your Rules Tables
For example, if an object group named CSM_INLINE_55 contains the hosts 10.100.10.15, 10.100.10.18,
and 10.100.10.25, importing an access control list by expanding the objects will create a rule that
includes all three addresses in the source (or destination, as appropriate) cell rather than a network/host
policy object named CSM_INLINE_55.
To configure expansion, you must have a naming scheme for your object groups that allows you to
identify the prefix of groups that you want to expand. The default is to expand any object group that starts
with the prefix CSM_INLINE. Configure these prefixes in the Auto-Expand Object Groups with
These Prefixes field on the Discovery Page, page11-21 by selecting Tools > Security Manager
Administration and selecting Discovery from the table of contents.