Select ObjectsTags to create a tag, assign a color, delete, rename, and clone tags. Each object can have up to 64 tags; when an object has multiple tags, it displays the color of the first tag applied to it.
On the firewall, the ObjectsTags tab displays the tags that you define locally on the firewall or push from Panorama to the firewall; on Panorama, it displays the tags that you define on Panorama. This tab does not display the tags that are dynamically retrieved from the VM Information sources defined on the firewall for forming dynamic address groups, or tags that are defined using the XML API.
When you create a new tag, the tag is automatically created in the Virtual System or Device Group that is currently selected on the firewall or Panorama.
Enter a unique tag name (up to 127 characters). The name is not case-sensitive.
Select this option if you want the tag to be available to:
Every virtual system (vsys) on a multi-vsys firewall. If you clear this selection, the tag will be available only to the Virtual System selected in the Objects tab.
Every device group on Panorama. If you clear this selection, the tag will be available only to the Device Group selected in the Objects tab.
Disable override (Panorama only)
Select this option to prevent administrators from overriding the settings of this tag in device groups that inherit the tag. This selection is cleared by default, which means administrators can override the settings for any device group that inherits the tag.
Select a color from the color palette in the drop-down. The default value is None.
Add a label or description to remind you what the tag is used for.
- Add a tag: To add a new tag, click Add and then fill in the following fields:You can also create a new tag when you create or edit policy in the Policies tab. The tag is automatically created in the Device Group or Virtual System that is currently selected.
- Edit a tag: To edit, rename, or assign a color to a tag, click the tag name that displays as a link and modify the settings.
- Delete a tag: To delete a tag, click Delete and select the tag in the window. You cannot delete a predefined tag.
- Move or Clone a tag: The options to move or clone a tag allows you to copy a tag or move a tag to a different Device Group or Virtual System on firewalls with multiple virtual systems enabled.
- Click Clone or Move and select the tag in the window. Select the Destination location—Device Group or Virtual System—for the tag. Clear this selection for Error out on first detected error in validation if you want the validation process to discover all the errors for the object before displaying the errors. By default, this option is enabled and the validation process stops when the first error is detected and only displays the error.
- Override or Revert a tag (Panorama only): The Override option is available if you have not selected the Disable override option when creating the tag. It allows you to override the color assigned to the tag that was inherited from a shared or ancestor device group. The Location field displays the current device group. You can also select the Disable override to disable further overrides.
- To undo the changes on a tag, click Revert. When you revert a tag, the Location field displays the device group or virtual system from where the tag was inherited.
Create and Apply Tags
Create and Apply Tags Create tags. To tag a zone, you must create a tag with the same name as the zone. When the zone ...
Use the Tag Browser
Use the Tag Browser The tag browser provides a way to view all the tags used within a rulebase. In rulebases with a large number ...
Use the Tag Browser
Use the Tag Browser Policies > Rulebase (Security, NAT, QoS...) The tag browser presents a summary of all the tags used within a rulebase (policy ...
Use Tags to Group and Visually Distinguish Objects
Use Tags to Group and Visually Distinguish Objects You can tag objects to group related items and add color to the tag in order to ...
Objects > Tags
Objects > Tags Tags allow you to group objects using keywords or phrases. Tags can be applied to address objects, address groups (static and dynamic), ...
Modify Tags Select Objects Tags to perform any of the following operations with tags: Click the link in the Name column to edit the properties ...
Objects > Address Groups
Objects > Address Groups To simplify the creation of security policies, addresses that require the same security settings can be combined into address groups. An ...
Objects > Addresses
Objects > Addresses An address object can include an IPv4 or IPv6 address (single IP, range, subnet) or a FQDN. It allows you to reuse ...
Overriding or Reverting a Security Policy Rule
Overriding or Reverting a Security Policy Rule The default security rules—interzone-default and intrazone-default—have predefined settings that you can override on a firewall or on Panorama. ...