Network objects

This module is divided into two sections:

  • The action bar, at the top of the screen, allowing objects to be sorted and modified.
  • Two columns dedicated to objects: one column listing them, the other displaying their properties.

NOTE
The creation of objects only allows declaring an object in Global mode if the option "Display global policies (Filter, NAT, IPsec VPN and Objects)" has been enabled in the Preferences module.

To find out which characters are allowed or prohibited in various fields, please refer to the section Allowed names.

Possible actions

IP version

This button completes the filtering feature and allows choosing the type of objects to display according to the IP version that they use. A drop-down menu will offer you the following choices:

IPv4 and IPv6 This option allows displaying all network objects of the chosen type (host, network, IP address range) in the list on the left, regardless of the IP version used for their address.
IPv4 This option allows displaying all network objects of the chosen type (host, network, IP address range) in the list on the left with addresses exclusively in IPv4.
IPv6 This option allows displaying all network objects of the chosen type (host, network, IP address range) in the list on the left with addresses exclusively in IPv6.

The different types of objects

Computer

Select a host in order to view or edit its properties. Each object of this type must contain a name and DNS resolution method: “Automatic” if the host has been configured with a dynamic IP address; “None (static IP)” if the host has been configured with a static IP address).

IPv6 address IPv6 address of the selected host.

EXAMPLE
2001:db8:11a::10


To make it easier to enter the IPv6 address, a drop-down list will suggest all the global prefixes entered on the firewall.

Network

Select a network in order to view or edit its properties. Each object of this type must contain a name, network address and its associated mask.

IPv6 address IPv6 address of the selected network and its associated mask, in CIDR notation.

EXAMPLE
2001:db8::/32


To make it easier to enter the IPv6 address, a drop-down list will suggest all the global prefixes entered on the firewall.