nat and security policies ip object need a subnet mask or not?

[chuckles]

in my firewall i use certain ip addresses for outside to inside natting and for security policies , but im wondering , under objects do i need to specify the subnet mask "/24 , etc" for each object host or not? i specified the mask for the inside and outside interfaces ip addresses but what about the objects in natting and security policies?

[reaper · Accepted solution]

Any single host objects do not need a subnet mask (but you are allowed tonset /32 if you like)