MATCHED
{
  "" => "access-list V420_IN extended permit object-group Symantec_Service_Group object-group Symantec_Clients Symantec_Servers (all 3 object groups)",
  "acl" => {
    "" => "access-list V420_IN extended permit object-group Symantec_Service_Group object-group Symantec_Clients Symantec_Servers (all 3 object groups)",
    "action" => "permit",
    "comment" => "(all 3 object groups)",
    "destination" => {
      "" => "Clients Symantec_Servers",
      "net_mask" => {
        "" => "Symantec_Servers",
        "address" => { "" => "Symantec_Servers", "name" => "Symantec_Servers" },
      },
      "network_address" => {
        "" => "Clients",
        "address" => { "" => "Clients", "name" => "Clients" },
      },
    },
    "interface_name" => { "" => "V420_IN", "name" => "V420_IN" },
    "port" => "",
    "protocol" => {
      "" => "object-group Symantec_Service_Group",
      "object_group_name" => { "" => "Symantec_Service_Group", "chunk" => "Symantec_Service_Group" },
    },
    "source" => {
      "" => "object-group Symantec_",
      "object_group_name" => { "" => "Symantec_", "chunk" => "Symantec_" },
    },
  },
}
MATCHED
{
  "" => "access-list V421_IN extended permit object-group Symantec_Service_Group 10.148.0.0 255.254.0.0 host 10.149.16.40  (One service group and two network addresses)",
  "acl" => {
    "" => "access-list V421_IN extended permit object-group Symantec_Service_Group 10.148.0.0 255.254.0.0 host 10.149.16.40  (One service group and two network addresses)",
    "action" => "permit",
    "comment" => "(One service group and two network addresses)",
    "destination" => {
      "" => "host 10.149.16.40",
      "host_address" => {
        "" => "10.149.16.40",
        "address" => { "" => "10.149.16.40", "dotted_quad" => "10.149.16.40" },
      },
    },
    "interface_name" => { "" => "V421_IN", "name" => "V421_IN" },
    "port" => "",
    "protocol" => {
      "" => "object-group Symantec_Service_Group",
      "object_group_name" => { "" => "Symantec_Service_Group", "chunk" => "Symantec_Service_Group" },
    },
    "source" => {
      "" => "10.148.0.0 255.254.0.0",
      "net_mask" => {
        "" => "255.254.0.0",
        "address" => { "" => "255.254.0.0", "dotted_quad" => "255.254.0.0" },
      },
      "network_address" => {
        "" => "10.148.0.0",
        "address" => { "" => "10.148.0.0", "dotted_quad" => "10.148.0.0" },
      },
    },
  },
}
CAN'T MATCH: access-list V422_IN extended permit object-group Symantec_Service_Group any any (Source & Destination any)
CAN'T MATCH: access-list V423_IN extended permit tcp any any range 137 139 (with a range of TCP ports)
CAN'T MATCH: access-list V424_IN extended permit tcp any any eq 445 (with a single service port)