Network Management of a Host Object

[Ni_c]

Mates,

Could you please tell me the real use case of Network Management in a Host Object. Couldn't find anything from checkpoint admin guide.

Thanks in advance.

[Daniel_Taney · Accepted solution]

We use this feature when the host might contain multiple IP addresses and we want the access rule to be applied to all IPs on the object. It saves you from creating multiple objects for the same single host. 

For example, we use it for TACACS sourced from multiple interfaces on a router.

[Ni_c]

Okay, Thanks Daniel Taney, Should it be physical interfaces of that host? 

[Daniel_Taney]

Yes, you should be able to add as many interfaces as you want that pertain to the host. I usually name the Interfaces to match how they appear on the host

[RickLin]

In R80.20 new feature, there is another kind of network object called "Wildcard" Network object.