https://live.paloaltonetworks.com/t5/general-topics/nat-and-security-policies-ip-object-need-a-subnet-mask-or-not/m-p/260364#M73799 Any single host objects do not need a subnet mask (but you are allowed tonset /32 if you like) Thu, 09 May 2019 13:32:33 GMT reaper 2019-05-09T13:32:33Z https://live.paloaltonetworks.com/t5/general-topics/nat-and-security-policies-ip-object-need-a-subnet-mask-or-not/m-p/260332#M73793 <P>in my firewall i use certain ip addresses for outside&nbsp;to inside natting and for security policies&nbsp;, but im wondering , under objects&nbsp;do i need to specify the subnet mask "/24 , etc" for each object host or not? i specified the mask for the inside and outside interfaces ip addresses but what about the objects in natting and security policies?</P> Thu, 09 May 2019 08:54:29 GMT https://live.paloaltonetworks.com/t5/general-topics/nat-and-security-policies-ip-object-need-a-subnet-mask-or-not/m-p/260332#M73793 chuckles 2019-05-09T08:54:29Z https://live.paloaltonetworks.com/t5/general-topics/nat-and-security-policies-ip-object-need-a-subnet-mask-or-not/m-p/260364#M73799 Any single host objects do not need a subnet mask (but you are allowed tonset /32 if you like) Thu, 09 May 2019 13:32:33 GMT https://live.paloaltonetworks.com/t5/general-topics/nat-and-security-policies-ip-object-need-a-subnet-mask-or-not/m-p/260364#M73799 reaper 2019-05-09T13:32:33Z