Look at CiscoSecure policy manager it is fairly resource intensive however it does rule checking and sanity checking of the generated rulesets and provides a means via IPSec of deploying the ACL's in a secure manner Scott ---------------------- Forwarded by Scott McGrath/InformationSystems/Hazen/DHHS on 05/01/2001 12:11 PM --------------------------- David Brousseau <brou@enterasys.com>@merit.edu on 05/01/2001 10:59:02 AM Sent by: owner-nanog@merit.edu To: nanog@merit.edu cc: Subject: OT: GUI ACL Editor? I am currently tasked to evaluate graphical ACL editors for possible use. A web search has not turned up many options that will edit a router's ACLs. Does anyone have any experience with such a tool or know where I might find out more? Thanks for your time, --Dave (See attached file: brou.vcf)