Question

Which utility can you use to identify redundant or shadow rules?

- The ACL trace tool in Cisco APIC-EM.
- The ACL analysis tool in Cisco APIC-EM.
- The Cisco APIC-EM automation scheduler.
- The Cisco IWAN application.

Answer 1

The ACL analysis tool in Cisco APIC-EM is used by network administrators to identify and optimize redundant or shadow rules in access control lists. This contributes to streamlining network security and efficiency.

Step-by-step explanation:

You can use the ACL analysis tool in Cisco APIC-EM to identify redundant or shadow rules in an access control list (ACL). This tool analyzes the ACL entries and checks for any redundancies or inconsistencies that can potentially cause network security issues. It provides network administrators with the insights needed to optimize and correct ACLs.

Redundant rules in an ACL can create unnecessary overhead on devices and complicate the ACL management process. Shadow rules are those that are never matched because they are preceded by a broader rule that matches and processes the packets first, making them effectively useless. The ACL analysis tool can pinpoint these issues, allowing for a more streamlined and efficient network infrastructure.