TIL you can permit/deny IP ranges and groups

By ranges I mean like 10.10.10.10 through 10.10.10.20, not something based on a subnet mask.

And say a group consisting 10.10.10.10, 192.168.1.5, 172.30.10.251, or whatever.

Duh. I wish I knew that long ago. I'd provide examples but I'm guessing I don't have much company in that regard. Note to self: quit sniffing glue.

I'm referring to the ASA here, not sure about others.