Managing objects and dynamic objects
All objects within an ADOM are managed by a single database unique to that ADOM. Objects inside that database can include items such as addresses, services, intrusion protection definitions, antivirus signatures, web filtering profiles, etc. For more information on the ADOM database, see the ADOM and policy layer.
Some objects include the option to enable dynamic mapping to map a single logical object to a unique definition based on the device or platform. When this feature is enabled, a table is displayed within the object configuration pane which lists the dynamic mapping information. See Dynamic mapping.
When making changes to an object within the object database, changes are reflected immediately within the policy table in the GUI; no copying to the database is required. If partial install is enabled, the edited object can be pushed to all the devices that currently use it. Installing objects
|
Not all objects are enabled by default. Some features must be enabled before they are visible in the GUI. See Feature visibility. Some objects can only be configured using the CLI Configurations menu. See CLI configurations |
Objects and dynamic objects are managed from the tree menu under Policy & Objects (or on the bottom half of the screen when dual pane is enabled). The available objects vary, depending on the specific ADOM selected.
Objects are used to define policies, and policies are assembled into policy packages that you can install on devices. Policy packages are managed under Policy Packages in Policy & Objects (on the top half of the screen when dual pane is enabled).
When you view a policy in a policy package, you can edit the policy by dragging objects from other columns, policies, or the object selector frame and dropping the objects in cells in the policy. For more information see Drag and dropping objects.
|
On the object configuration panes, you can see whether an object is used in the Used column, and you can right-click on an object to find out where the object is used (Where Used) or to add the object to a group (Grouping). |
FortiManager objects are defined either per ADOM or at a global level.
When managing objects, you can click the Full Screen/Exit Full Screen option in the toolbar to toggle full screen mode for the currently displayed table.