topic Re: Dynamic Global Objects no longer supported? in Firewall and Security Management

Dynamic Global Objects no longer supported?

Maarten_Sjouw — Wed, 18 Oct 2017 10:49:55 GMT

Gents, We are setting up a R80.10 MDS, in R77.30 we are using dynamic global objects to be able to use an per domain editable group, in the global rules.

While you create an dynamic object with a name ending in _global in the global object list, in the domain you create a group with the exact same name and in there you ie put all GW objects for that domain. This way you create management and other rule in the Global rulebase that you do not need to repeat over the amount of domains you have, 150+ in our case.

When I try to use this in R80.10 it complains the object already exists....

Last time I asked I was told this would return in R80.10, but that was a while back, is it indeed still not there or is it just changed?

Re: Dynamic Global Objects no longer supported?

Tomer_Sole — Wed, 18 Oct 2017 13:07:56 GMT

Hi,

Dynamic Global Objects are supported with R80.10. User experienced is changed.

Instead of solely relying on the _global suffix, there is a new network object of type "Dynamic Global Network Object".

R7x:

1. Login to Global Domain

2. Create a dynamic object with name that ends with _global, save.

3. Login to the Domain

4. Create a network object with the same name, save.

5. Assign (or re-assign) global policy.

R80.10 and above:

1. Login to Global Domain

2. Create a Dynamic Global Network Object. Name must end with _global, and if not, you will not be able to OK the dialog (or complete the API call). Publish.

3. Login to the Domain

4. Create a network object with the same name. Publish.

5. Assign (or re-assign) global policy.

During upgrade, your Dynamic Objects with the _global suffix which existed in the Global Domain will be converted automatically.

Re: Dynamic Global Objects no longer supported?

Maarten_Sjouw — Wed, 18 Oct 2017 15:03:00 GMT

Thanks Tomer, that did the trick.

Re: Dynamic Global Objects no longer supported?

Christian_Peter — Tue, 20 Nov 2018 10:39:50 GMT

Great reply!

Do you by any chance know if objects used for communicating with public and private clouds, can be defined as Global objects?
I can create a Datacenter Server object and connect to e.g. Azure, but can I define such an object as a Global object and use this within all domains?

Re: Dynamic Global Objects no longer supported?

Christian_Peter — Tue, 20 Nov 2018 11:48:34 GMT

Never mind!
I found the answer in the Know Limitations for R80.20

R80.20 CloudGuard Controller Known Limitations

01970321

CloudGuard Objects (Data Center Servers and Data Center Objects) are not supported in Global Domain.

Re: Dynamic Global Objects no longer supported?

mikesleath — Wed, 11 Nov 2020 13:39:22 GMT

Hi,

Do you have an example of the API call to create these object types - we make heavy use of them and the ability to create via the API is a requirement. Previously they were created using dbedit.

Thanks.