Clarification on what is considered and "unused" object.

Announcements

ATTENTION Customers, All Partners and Employees: The Customer Support Portal (CSP) will be undergoing maintenance and unavailable on Saturday, November 7, 2020, from 11 am to 11 pm PST. Please read our blog for more information.

Reply
Highlighted
L2 Linker

Clarification on what is considered and "unused" object.

Can I get some clarification on what is considered an unused object?  

For example is an Address or Service Object considered unused if it is not part of any rules if it is listed individually and that is it?

How about if the object is not listed individually in any rules, but it is part of an object group that is also not part of any rules?

And finally, how about if the object is not listed individually in any rules, but is part of an object group and that object group is in fact included in a rule?

 

Thanks for the clarification.


Accepted Solutions
Highlighted
L4 Transporter

Hello BOkay,

Unused objects simply means address or service objects that's not being referenced in address group , service group , nat rules, and security rules.  If the address object is member of address group object , it will shows as "used" regardless if address group object is being referenced in any of the security or nat rules.  

View solution in original post


All Replies
Highlighted
L4 Transporter

Hello BOkay,

Unused objects simply means address or service objects that's not being referenced in address group , service group , nat rules, and security rules.  If the address object is member of address group object , it will shows as "used" regardless if address group object is being referenced in any of the security or nat rules.  

View solution in original post

Highlighted
L5 Sessionator

Let me correct one thing.

If an address object is solely being used in address groups but those address groups are not used, the address object is not user as well.

We do a recursion to see if the object is actually needed for the security policy in place, including security rules, NAT rules, custom application rules, interfaces, etc. whether directly consumed of indirectly consumed by groups the object belongs to.

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!