Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Contributor

Global object in local group?

Jump to solution

I just need confirmation that global objects, eg. a network object, can be used in a local group.

Is that correct?

0 Kudos
1 Solution

Accepted Solutions
Highlighted
Contributor

Yes, We can use global objects in local groups, only issue is if you want to export the policy package then you need to unassigned the global policy and it won't allow you to perform this until you will removed the global objects from local group or local rules.

It is not a good approach better to create local object and call under local group.

Thanks,

Manoj

View solution in original post

0 Kudos
6 Replies
Highlighted
Champion
Champion

Confirmed, this is correct. I just tested it within our Lab.

0 Kudos
Highlighted
Admin
Admin

The full answer is, yes, you can you it. But you do not want to... Every time that global object is modified or deleted, all local groups using it should be updated. It is a manual process prone to human errors

Highlighted
Contributor

Yes, We can use global objects in local groups, only issue is if you want to export the policy package then you need to unassigned the global policy and it won't allow you to perform this until you will removed the global objects from local group or local rules.

It is not a good approach better to create local object and call under local group.

Thanks,

Manoj

View solution in original post

0 Kudos
Highlighted

on the other hand, global group can have ONLY global objects in it.

Kind regards,
Jozko Mrkvicka
0 Kudos
Highlighted
Champion
Champion

But you can create a Dynamic global object that you can use in a global policy and you can create a Group in the domains, with the same name as that dynamic global object, which you can then fill with local domain objects.

Example would be to allow access to all gateways from your management system through global policy, you create a group called All_Gateways_global in the domains and a dynamic global object in the global policy. Just add the gateways in each domain to the group and the global policy will apply.

Regards, Maarten
Highlighted
Contributor

yes, Incase of dynamic object we need to specify the local object with same name form local domain.

Thanks,

Manoj