ScreenOS Firewalls (NOT SRX)
Highlighted
ScreenOS Firewalls (NOT SRX)

Address Objects in different Zones

‎08-07-2018 07:25 PM

Hi,

Based on the below configuration, the address object "cms01" is referred in different zones.

So my question is the address object is significant to the respective zones only or is it global ?

 

set address "Trust" "cms01" 172.16.0.99 255.255.255.255
set address "InterDC" "cms01" 172.16.0.73 255.255.255.255 "CMS"

 

regards

Rajesh

1 REPLY 1
Highlighted
ScreenOS Firewalls (NOT SRX)

Re: Address Objects in different Zones

‎08-07-2018 07:37 PM

Hi Rajesh,

 

Though the names of the address objects are same, they are two different objects configured in two different Zones. The scope for each of the objet is limited to the respective zone in which they were configured and not Global. The only objects that are global are those that are explicitly configured in the Global Zone and the MIP and VIP objects, if the respective is configured on the interfaces.

 

Hope this answers your question.

 

Regards,

Pranita

Feedback