08-05-2023 06:03 AM - edited 08-05-2023 06:05 AM
Hello Jbusty,
Sorry I did not see the screenshots (currently at home, my firewall is stricter than in office).
Based on your last message:
- don't use address objects for Template configuration (interface / VR...) : that creates dependencies between Device Group and Templates, and you will understand why it is not good the day you need to restore a firewall 😄
Also generally speaking, I don't think this is a best (not even a good) practice, but that's only my feedback.
- maybe you can open a case to the TAC, to check this behavior (maybe an expected behavior).
I think it may be a expected one, and you will probably not see this if you are on multi-vsys settings, as the address object will probably be in vsys1.
Olivier
PCSNE - CISSP
Best Effort contributor
Check out our PANCast Channel
Disclaimer : All messages are my personal ones and do not represent my company's view in any way.
