Dynamic address objects not showing in Panorama

MartinE — Fri, 10 Mar 2023 18:10:21 GMT

I'm using the AWS plugin to read VPC and EC2 tags in AWS in order to be able to create dynamic address object groups and use in policy.

Under the AWS plugin configuration, I can see Panorama correctly retrieving information from AWS based on the tags I've defined. However, while still in Panorama, when I go to 'Objects > Address groups', I change the type to 'Dynamic' and select 'Match Criteria', the list of IP addresses retrieved from AWS are not in the list. The list is just blank.

Any ideas on how to resolve this?

I'm using AWS plugin version 4.1.0. Panorama is on version 10.2.3-h2

Re: Dynamic address objects not showing in Panorama

aleksandar.astardzhiev — Fri, 24 Mar 2023 14:14:23 GMT

Hi @MartinE,

When you go to Objects -> Address Groups -> <edit/create-dynamic-group> -> Match Criteria you will not see IP addresses in the list, but rather the available tags retrieved from AWS.

Once you select desired tag and click OK to create the dynamic group, you can see the matched IPs by clicking the "more" under Addresses column in the list of Address groups (not need to open group for edit)

If your problem is that the list of available tags (from the first picture) is completely empty - Are you using any Ad blocker extensions with your browser? Try to open Panorama management with browser that does not have any extensions installed and see if the tag list is populating.

topic Dynamic address objects not showing in Panorama in Panorama Discussions

Dynamic address objects not showing in Panorama

Re: Dynamic address objects not showing in Panorama