Create and Apply Tags

Use tags to identify the purpose of a rule or configuration object, and help you better organize your rulebase. To ensure that policy rules are properly tagged, see Enforce Policy Rule Description, Tag, and Audit Comment. Additionally, you can View Rules by Tag Group by first creating, and then setting the tag as the Group tag.
  1. Create tags.
    To tag a zone, you must create a tag with the same name as the zone. When the zone is attached in policy rules, the tag color automatically displays as the background color against the zone name.
    1. Select ObjectsTags.
    2. On Panorama or a multiple virtual system firewall, select the Device Group or the Virtual System to to make the tag available.
    3. Click Add and enter a Name to identify the tag, or select a zone name from the drop-down to create a tag for a zone. The maximum length is 127 characters.
    4. (Optional) Select Shared to create the object in a shared location for access as a shared object in Panorama or for use across all virtual systems in a multiple virtual system firewall.
    5. (Optional) Assign one of the 17 predefined colors to the tag. By default, Color is None.
      add-tag.PNG
    6. Click OK and Commit to save the changes.
  2. Apply tags to policy.
    1. Select Policies and any rulebase under it.
    2. Click Add to create a policy rule and use the tagged objects you created in Step 1.
    3. Verify that the tags are in use.
      apply_tags_policy.PNG
  3. Apply tags to an address object, address group, service, or service group.
    1. Create the object.
      For example to create a service group, select ObjectsService GroupsAdd.
    2. Select a tag from the Tags drop-down or enter a name in the field to create a new tag.
      To edit a tag or add color to the tag, see Modify Tags.

Related Documentation