>
    Strata Copilot
    Configure Equipment Objects and Equipment Group Objects
    Focus
    Download PDF
    Focus
    1. Home
    2. Network Security
    3. Network Security: Security Policy
    4. Policy Objects
    5. Policy Objects: Subscriber and Equipment
    6. Configure Equipment Objects and Equipment Group Objects
    Download PDF
    Network Security

    Configure Equipment Objects and Equipment Group Objects

    Table of Contents

    Configure Equipment Objects and Equipment Group Objects

    Configure equipment and equipment group objects for policy rules.
    Where Can I Use This?What Do I Need?
    • NGFW (PAN-OS & Panorama Managed)
    Use equipment objects to represent mobile network devices by name in security policy rules. Equipment objects can match a single IMEI, a range of IMEI values, or an IMEI prefix. Equipment group objects collect multiple equipment objects so that a single policy rule can cover a defined set of devices.

    Configure an Equipment Object (Single IMEI)

    1. Select ObjectsMobile NetworksEquipment.
    2. Click Add.
    3. Enter a Name for the equipment object.
    4. (Optional) Enter a Description.
    5. Set Type to IMEI.
    6. Enter the IMEI value (15 or 16 digits).
    7. Click OK.

    Configure an Equipment Object (IMEI Range)

    An IMEI range matches any IMEI value between a specified start and end. The range is defined from digit 6 through digit 16.
    1. Select ObjectsMobile NetworksEquipment.
    2. Click Add.
    3. Enter a Name for the equipment object.
    4. (Optional) Enter a Description.
    5. Set Type to IMEI Range.
    6. Enter the Start IMEI value and the End IMEI value.
      Example:
      • Start: 4002223008001000
      • End: 4002223009505000
    7. Click OK.

    Configure an Equipment Object (IMEI Prefix)

    An IMEI prefix matches any IMEI that begins with the specified digits. The prefix can start from digit 6 and must end with a * wildcard.
    1. Select ObjectsMobile NetworksEquipment.
    2. Click Add.
    3. Enter a Name for the equipment object.
    4. (Optional) Enter a Description.
    5. Set Type to IMEI Prefix.
    6. Enter the prefix value followed by *.
      Example:
      • 353234121* — matches all IMEIs beginning with 353234121
      • 35323412122* — matches all IMEIs beginning with 35323412122
    7. Click OK.

    Configure an Equipment Group Object

    An equipment group object references one or more equipment objects. Use an equipment group object in a security policy rule when you want a single rule to match a defined set of devices.
    1. Select ObjectsMobile NetworksEquipment Group.
    2. Click Add.
    3. Enter a Name for the equipment group.
    4. (Optional) Enter a Description.
    5. In the Equipments field, add the equipment objects to include in the group.
    6. Click OK.
    7. Commit the configuration.

    Verify Equipment Configuration

    Use the following CLI commands to verify your equipment objects and groups:
    show mobile-network equipment <equipment-name> 
show mobile-network equipment-group <group-name>

    © 2026 Palo Alto Networks, Inc. All rights reserved.