Use tags to identify the purpose of a rule
or configuration object and to help you better organize your rulebase.
To ensure that policy rules are properly tagged, see how to Enforce Policy Rule Description, Tag, and Audit Comment. Additionally,
you can View Rules by Tag Group by first creating
and then setting the tag as the Group tag.
Create tags.
To tag a zone, you must create a tag with the same
name as the zone. When the zone is attached in policy rules, the
tag color automatically displays as the background color against
the zone name.
Select ObjectsTags.
On Panorama or a multiple virtual system firewall,
select the Device Group or the Virtual
System to make the tag available.
Add a tag and enter a Name to
identify the tag or select a zone Name to
create a tag for a zone. The maximum length is 127 characters.
(Optional) Select Shared to
create the object in a shared location for access as a shared object
in Panorama or for use across all virtual systems in a multiple
virtual system firewall.
(Optional) Assign a Color from
the 17 predefined colors. By default, Color is None.
Click OK and Commit to
save your changes.
Apply tags to policy.
Select Policies and
any rulebase under it.
Add a policy rule and use the
tagged objects you created in Step 1.
Verify that the tags are in use.
Apply tags to an address object, address group, service,
or service group.
Create the object.
For example, to create a service group, select ObjectsService GroupsAdd.
Select a tag (Tags) or enter
a name in the field to create a new tag.
To edit a tag or add color to the tag, see Modify
Tags.