AclCheck - a tool for static analysis of ACL inter-rule conflicts

Authors:Hozza Tomáš, Ryšavý Ondřej
Licence:required - no fee
Keywords:Filtering, ACL, Firewall, Security policy, Static analysis, Tools
AclCheck is a console application written in C++ for complete static analysis of Access Control Lists contained in a network device configuration. Tool detects conflicts among rules of each ACL in a given configuration file. Used analysis algorithm is fast enough even for very large ACLs (10000+ rules).
The tool is freely available at
Research groups:
Licence terms:
Source codes are available under GNU/GPLv3 (

Your IPv4 address:
Switch to IPv6 connection

DNSSEC [dnssec]