SonicOS 7.1 Objects

Address Groups

As more and more address objects are added to the firewall, you can simplify managing the addresses and access policies by creating groups of addresses. Changes made to the address group are applied to each address in the group. Address groups can contain other address groups as well as address objects.

SonicOS has the ability to group the Address Objects and other Address Groups into Address Groups. Address Groups can be defined to introduce further referential efficiencies.

Address groups can contain any combination of host, range, or network address objects. For example, My Public Group can contain the host address object, My Web Server, and the range address object, My Public Servers, effectively representing IP addresses 67.115.118.66 to 67.115.118.90 and IP address 67.115.118.110.

Dynamic address objects (MAC and FQDN) should be grouped separately, although they can safely be added to address groups of IP-based address objects, where they will be ignored when their reference is contextually irrelevant (for example, in a NAT policy).

Address groups are automatically created when certain features are enabled.

For example, in Classic Mode, a Radius Pool address group is created when the Enable Local Radius Server option is enabled on WLAN zone configuration, and are deleted when the feature is disabled. For more information, refer to Configuring the RADIUS Server.

Was This Article Helpful?

Help us to improve our support portal

Techdocs Article Helpful form

  • Hidden
  • Hidden

Techdocs Article NOT Helpful form

  • Still can't find what you're looking for? Try our knowledge base or ask our community for more help.
  • Hidden
  • Hidden