PDA

View Full Version : Sanity check regarding groups within groups within NAT rules.



Valefor
2007-01-17, 18:47
I know it sounds confusing from the subject, but I've always been told that having a group objects within a group object used in a NAT rule can seriously bog down the firewall. Has anyone else heard this or experienced it?

Thanks!

chillyjim
2007-01-17, 20:53
That was true 5 or so years ago. Today as long as the group size is sane (500 or so objects total) it shouldn't be a problem.