Custom Filter for Security Policy Source and Destination

[HowsThisWork]

I have a use case where I need to search Security Policies based on the source or destination being in certain network ranges. The filters seem to work fine until the source or destination is an object of Type=IP Range or an address-group of Type=dynamic. Those two types of objects seem to get skipped over by the filter.

Is anyone aware of a different method to get around this?

Possibly related, anyone know what the search options of contains.recursive and equal.recursive do? I've tried playing around with them but I can't figure it out.

[lychiang]

Best option will be use filter like below shown in screenshot:

source in network (yournetwork)

or 

destination in network (yournetwork)

 

[HowsThisWork]

Yea, that's what I've been doing and it works great. But it doesn't seem to match when the source or destination object is an ip range or a dynamic address-group.