How to define differents objects names for same FQDN object ?

ldormond — Fri, 04 Nov 2011 10:11:33 GMT

Hello,

I want to define multiple object name for the same FQDN object. The idea is to have relevent object name for different policies.

For example, I define 2 address objects for FQND myserver.mycompany.com : H_srv_oracle and H_srv_ntp.

Then I define 2 security policies : one with H_srv_oracle for oracle traffic, the other with H_srv_ntp for NTP traffic.

The problem is that only one rule works, the other not.

I am pretty sure that this is related to FQDN DNS resolution, because when I look at the FQDN statistic on the PA device using the request system fqdn show command :

myserver.mycompany.com (Objectname H_srv_oracle):

10.120.187.26 3595 5

myserver.mycompany.com (Objectname H_srv_ntp):

Not resolved

Why the device isn't able to resolve both objects at the same time ? I have tried to refresh FQDN but it doesn't solve the problem ?

This would be very usefull to easily identify policies based on relevent objects name.

Regards,

Laurent

Re: How to define differents objects names for same FQDN object ?

snisar — Wed, 09 Nov 2011 05:06:10 GMT

Object to IP or FQDN mapping is unique. We cannot use two objects for a single IP or FQDN.

topic Re: How to define differents objects names for same FQDN object ? in General Topics

How to define differents objects names for same FQDN object ?

Re: How to define differents objects names for same FQDN object ?