Configuring Designer for Cisco ASA Global ACL Suggestions

Overview

By default, Designer offers suggestions only for the local ACL on monitored Cisco ASA devices. However, Tufin allows you to configure Designer to also offer suggestions for modifying the global ACL. This feature is only supported for Access Request workflows.

Steps

1. Navigate to:

   https://<SecureTrack_IP>/securetrack/admin/stcgitest.htm

2. Navigate to Edit StConf > Fetch StConf.

3. In the StConf file, add the following line.

   <designer_support_global_acl>1</designer_support_global_acl>

4. Click Submit New Conf.

   To disable this feature, change to 0, or remove the line.