Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Create and Manage Addresses or Address Groups

Use the Addresses page to create addresses and address groups. Addresses and address groups are used in firewall and NAT services. After you create an address, you can combine it with other addresses to form an address group. Address groups are useful when you want to apply the same policy to multiple services.

Create Addresses or Address Groups

  1. Select Security > Shared Objects > Addresses.

    The Addresses page appears.

  2. Click the plus icon (Blue plus symbol suggesting an action like adding or expanding content.).

    The Create Addresses page appears.

  3. Complete the configuration according to the following guidelines:
    Table 1: Fields on the Create Addresses Page

    Field

    Description

    Name

    Enter a unique name for the address. The name must begin with an alphanumeric character and can contain alphanumeric characters and some special characters (colons, hyphens, forward slashes, periods, and underscores). The maximum length is 63 characters.

    Description

    Enter a description for your address. The description can contain alphanumeric characters and special characters (excluding ampersand, lesser than (<) and greater than (>), and newline (\n)). The maximum length is 900 characters.

    You should make this description as useful as possible for all administrators.

    Object Type

    Select Address or Address Group. If you select Address Group, then the screen changes so you can select the addresses you want to include in your address group.

    Type

    Select a type of address and fill in the corresponding fields. Available types are:

    • Host

      • Host IP—Enter the IPv4 or IPv6 host IP address.

      • Hostname—Enter the hostname. It must begin with an alphanumeric character and cannot exceed 63 characters. Dashes and underscores are allowed.

    • Range

      • Start Address—Enter a starting IPv4 or IPv6 address along with the classless inter-domain routing (CIDR) for the address range.

      • End Address—Enter an ending IPv4 or IPv6 address for the address range. The range is validated after you enter the address.

      Note:

      An address range is configured on a managed device as an address set with one or more network address objects covering the specified address range.

    • Network

      • Network—Enter the network IP address. For example: 192.0.2.0. IPv6 is also supported. For example: 2001:db8:4136:e378:8000:63bf:3fff:fdd2.

      • Subnet Mask—Enter the subnet mask for the network range. For example, IPv4 netmask: 192.0.2.0/24. IPv6 prefix: 2001:db8::/32 The subnet mask is validated as you enter it. You must enter the correct subnet mask in accordance with the network value.

    • DNS Host

      • DNS Name—Enter the DNS name. For example: company.com. Only alphanumeric characters, dashes, and periods are accepted. This name cannot exceed 63 characters in length, and must end with an alphanumeric character.

      • DNS Type—Select the DNS type as IPv4-only or IPv6-only.

    • Variable

      • Default address—This default address is replaced with the mapped device-specific address when applied to the group firewall policy.

      • Variable address—Steps to add the variable address:

        1. Click the plus icon (Blue plus symbol suggesting an action like adding or expanding content.). Create variable page appears.
        2. Select the check box beside each device to which you want to map this variable address. Click the arrow to move the selected device or devices from the Available column to the Selected column. Only devices from the current and child domain are listed. You can use the fields at the top of each column to search for listed devices.
        3. Select a predefined address by clicking anywhere within this field and choosing an address from the Select Address window. The default address is replaced by this device-specific address when applied to a policy that includes the selected device or device
        4. Click OK. A new variable with your configurations is created. You can use this variable address in policies. See Configure a Security Policy Rule.
          Note:

          Variables addresses are used in group policies only. Variable addresses are not applicable to device policies.
    Table 2: Address Group Settings

    Field

    Description

    Name

    Enter a unique name for the address group that must begin with an alphanumeric character. The name can contain alphanumeric characters and some special characters (colons, hyphens, forward slashes, periods, and underscores). The maximum length is 63-character.

    Description

    Enter a description for your address. The description can contain alphanumeric characters and special characters (excluding ampersand, lesser than (<) and greater than (>), and newline (\n)). The maximum length is 900 characters.

    You should make this description as useful as possible for all administrators.

    Object Type

    Select Address or Address Group. If you select Address Group, then the screen changes so you can select the addresses you want to include in your address group.

    Addresses

    Select the check box beside each address you want to include in the address group. Click the greater-than icon (>) to move the selected address or addresses from the Available column to the Selected column. Note that you can use the fields at the top of each column to search for addresses.
  4. Click OK to save the changes. If you want to discard your changes, click Cancel instead.

    A new address or address group with your configurations is created. You can use this object in firewall or NAT policies.

Manage Addresses or Address Groups

You cannot edit or delete predefined addresses. You cannot edit or delete the GeoIP feeds from the Addresses page. You can edit or delete the GeoIP feeds from the Security > Shared Objects > GEO Fencing page.

  • Edit—Select the address or address group, and then click the pencil icon (Blue pencil icon indicating edit functionality.). Address Name and Object Type can not be modified.

    When you edit an address that is a deployed as part of a policy, you will need to redeploy that policy in order for the changes to take effect.

  • Clone—Select the address or address group, and then click More > Clone.

  • Delete—Select the address or address group, and then click the trash can icon (Blue trash can icon representing delete or remove function.). Only addresses or address groups that have not been referenced in any policy can be deleted. If you try to delete such an address or address group, an error message will be displayed.

See Also