SRX Address-set and Cisco/Cisco ASA Object-Group Bugs with Optimization/Nested Groups and Multiple Sets of Source/Dest Addresses

Multiple instances of the same network object-group will be generated if multiple filters with object groups used.

```
NETWORK.net file

GROUPA = SUBGROUP1
SUBGROUP2
SUBGROUP3

GROUPB = SUBGROUP1
SUBGROUP4

SUBGROUP1 = 1.1.1.1/32
SUBGROUP2 = 2.2.2.2/32
SUBGROUP3 = 3.3.3.3/32
SUBGROUP4 = 4.4.4.4/32

cisco_sample_policy.pol file

header {
comment:: "first-group-acl-a"
target:: cisco first-group-acl-a object-group
}
term permit-all-from-groupa {
source-address:: GROUPA
action:: accept
}
term permit-all-from-groupa {
destination-address:: GROUPB
action:: accept
}

header {
comment:: "first-group-acl-b"
target:: cisco first-group-acl-b object-group
}
term permit-all-from-groupb {
source-address:: GROUPA
action:: accept
}

cisco_sample_policy.acl file

object-group network ipv4 GROUPA
1.1.1.1/32
2.2.2.2/32
3.3.3.3/32
exit

object-group network ipv4 GROUPA
1.1.1.1/32
2.2.2.2/32
3.3.3.3/32
exit

object-group network ipv4 GROUPB
1.1.1.1/32
4.4.4.4/32
exit

! $Id:$
! $Date:$
! $Revision:$
no ip access-list extended first-group-acl-a
ip access-list extended first-group-acl-a
remark $Id:$
remark first-group-acl-a

remark permit-all-from-groupa
permit ip net-group GROUPA any

remark permit-all-from-groupa
permit ip any net-group GROUPB

exit

no ip access-list extended first-group-acl-b
ip access-list extended first-group-acl-b
remark $Id:$
remark first-group-acl-b

remark permit-all-from-groupb
permit ip net-group GROUPA any

exit

```