Generic Data Center Objects

From R81, you can enforce access to and from IP addresses defined in files located in external web servers.

To do that, use the Generic Data Center object in SmartConsole. The Generic Data Center object points to a JSON file in an external server which contains the IP addresses which you want to access. This way, when the Generic Data Center object is used in a policy, SmartConsole can retrieve the IP information from the JSON file as necessary.

You can host the JSON file also locally on the Security Management Server.

This feature is useful in cases where one administrator creates the Rule Base and defines the objects, and another administrator manages the content of these objects.

This feature is supported in the Access Control, Threat Prevention, HTTPS Inspection, and NAT Rule Bases.

The feature is supported only on a Security Management Server R81 and higher and Security Gateway (Cluster) R81 and higher.

After you create the Generic Data Center object, any change made in the file is automatically enforced on the Security Gateway with no need to install policy.

To create the JSON file, follow the guidelines described in sk167210.

Limitations

  • You can make up to 15,000 changes in a JSON file between two time intervals at which the JSON file is sampled.

  • The number of generic data center objects + dynamic objects + updatable objects in all policy packages cannot exceed 2,000.