Sanity check regarding groups within groups within NAT rules.

[Valefor]

I know it sounds confusing from the subject, but I've always been told that having a group objects within a group object used in a NAT rule can seriously bog down the firewall. Has anyone else heard this or experienced it?

Thanks!

[chillyjim]

That was true 5 or so years ago. Today as long as the group size is sane (500 or so objects total) it shouldn't be a problem.