An object group consists of a range of IP addresses or Port numbers. When you create business policies and firewall rules, you can define the rules for a range of IP addresses or a range of TCP/UDP ports, by including the object groups in the rule definitions.
You can create Address groups to save the range of valid IP addresses and Port groups for the range of port numbers. You can simplify the policy management by creating object groups of specific types and reusing them in policies and rules.
Using Object Groups, you can:
- Manage policies easily
- Modularize and reuse the policy components
- Update all referenced business and firewall policies easily
- Reduce the number of policies
- Improve the policy debugging and readability