AnsweredAssumed Answered

How are the group objects being processed by the policy?

Question asked by Vladimir Yakovlev on Nov 9, 2017
Latest reply on Nov 9, 2017 by Valeri Loukine

Somewhat trivial question, but I am interested in the impact the group objects have on policy.

If, for example, we have a single source and a destination comprised of 250 objects, will this result in firewall "creating" 250 virtual rules to process the parent rule?

If the group members are IP addresses, how are they sorted for processing?

If the "last" IP is the one with most hits, does this imply that the preceding objects in the group slowing overall rule processing? 

Outcomes