Like to be any less clear on that?

[spudtater]

From the Cisco network security material:

The group-object command is used to construct hierarchical, or nested, object groups. The group-object command, which is not to be confused with the object-group command, places one object group into another.

The difference in object groups and group objects is as follows:

• An object group is group consisting of objects.
• A group object is an object in a nested group and is itself a group.

If they hadn't written those paragraphs, I would actually be less confused.   8^P

Comments

[williamjm.livejournal.com]

So, an object group can be made up of group objects where each of the group objects can be an object group.

I think they could have varied their terminology a bit more.

[spudtater.livejournal.com]

What's really not helping is that after reading that through a couple of times, the word "group" doesn't look like a real word anymore.

[mr-purpleduck.livejournal.com]

Objects are great on FOS (i.e. PIX and ASA), however the manuals are very confusing.

The most incorrectly used command I've found is sysopt permit ipsec (or the new version sysopt permit vpn), some of the manuals (and training) are just plain wrong about what the command does.

[spudtater.livejournal.com]

> some of the manuals (and training) are just plain wrong about what the command does.

Oh, good grief.