Focus

PAN-OS Web Interface Reference

Objects > Tags

Table of Contents

Objects > Tags

Tags allow you to group objects using keywords or phrases. You can apply tags to address objects, address groups (static and dynamic), applications, zones, services, service groups, and to policy rules. You can also use an SD-WAN Interface profile to apply a link tag to an Ethernet interface. You can use tags to sort or filter objects and to visually distinguish objects by color. When you apply a color to a tag, the Policy tab displays the object with a background color.

You must create a tag before you can group rules using that tag. After you assign grouped rules by a tag, View Rulebase as Groups to see a visual representation of your policy rulebase based on the assigned tags. While viewing your rulebase as groups, the policy order and priority is maintained. In this view, select the group tag to view all rules grouped by that tag.

A predefined tag named Sanctioned is available for tagging applications (ObjectsApplications). These tags are required for accuracy (Monitor > PDF Reports > SaaS Application Usage).

What do you want to know?	See:
How do I create tags?	Create Tags
How do I view the rulebase as groups?	View Rulebase as Groups
Search for rules that are tagged. Group rules using tags. View tags used in policy. Apply tags to policy.	Manage Tags
Looking for more?	See Policy. See Create a Link Tag for an SD-WAN link.

Objects > Service Groups

Create Tags