[munit_si@yahoo.com]

Experts,

I want to understand the flexibility in netmask option, while defining a network object.


My requirement is to match a particular octet in network traffic , and then do filtering based upon that.

In case of Cisco routers/Pix Firewall we easily achieve that


Here is an example of cisco router

ip access-list 150 permit ip 0.0.79.0 255.255.0.255 any

This filter will permit any ip address that has 79 as the third octet

example

2.3.79.2
1.4.79.3
172.25.79.140


MY question is can we do the same in case of checkpoint firewall's

I tried , but failed to create a network object with the above requirements

Thanks
Munit