Cisco ASA – A group cannot contain services of different types

In Cisco ASA 6.4.9 – and older possibly – it is possible to mix different types of service in a group. So you can have TCP and UDP or TCP-UDP and TCP in the same group.

Later versions of ASA do not allow this. In ASDM, you will get error message like below if you attempt to do this.

Additionally, if you had created a group with mixed types of service, later version of ASDM will not show this service group.

Write a Comment