How to define differents objects names for same FQDN object ?

[ldormond]

Hello,

I want to define multiple object name for the same FQDN object. The idea is to have relevent object name for different policies.

For example, I define 2 address objects for FQND myserver.mycompany.com : H_srv_oracle and H_srv_ntp.

Then I define 2 security policies : one with H_srv_oracle for oracle traffic, the other with H_srv_ntp for NTP traffic.

The problem is that only one rule works, the other not.

I am pretty sure that this is related to FQDN DNS resolution, because when I look at the FQDN statistic on the PA device using the request system fqdn show command :

myserver.mycompany.com  (Objectname H_srv_oracle):
                   10.120.187.26              3595                        5
myserver.mycompany.com  (Objectname H_srv_ntp):
                    Not resolved

Why the device isn't able to resolve both objects at the same time ? I have tried to refresh FQDN but it doesn't solve the problem ?

This would be very usefull to easily identify policies based on relevent objects name.

Regards,

Laurent

[snisar]

Object to IP or FQDN mapping is unique. We cannot use two objects for a single IP or FQDN.