Still confused. I get the following additional error after saying YES to object 10.188.172.0/24 being non-unique:
"There are one or more non-unique address ranges contained in this range. Would you like to replace the existing ranges by this one?"
Some additional background:
I have 2 network objects:
- Network_10.188.172.0_24_WEB (10.188.172.0/24). It is used in about 10 rules
- Net_10.188.172.0_23 (10.188.172.0/23). It is used in an interface antispoofing group.
I would prefer to have the 2 network objects as the one is labelled properly for the rules and the other is labelled properly for the antispoof group. But I guess best practice would dictate to only have one.