Lock an ADOM

If workspace is enabled, you must lock an ADOM prior to performing any management tasks on it. See Lock an ADOM or policy package for instructions.

Create a new object

Objects can be created as global objects, or for specific ADOMs.

To create a new object:

1. Select the specific ADOM in which you are creating the object from the drop-down list in the toolbar, or select Global to create a global object. The objects list is displayed in lower frame.
2. Select the object type that you will be creating. For example, view the firewall addresses by going to Firewall Objects > Address.

The firewall address list is displayed in the content pane. The available address or address group lists are selectable on the content pane toolbar.

Firewall objects

3. To create a new firewall address, select Create New, then select the type of address from the drop-down list. In this example, Address was selected. The New Address dialog window will open.

Create new firewall address object

Enter the required information, depending on the object selected, and then select OK to create the new object.

Map a dynamic object

The devices and VDOMs to which a global object is mapped can also be viewed from the object list. In v5.2 or later, you can add an object to groups and enable dynamic mapping. These options are not available for all objects.

When the Dynamic Mapping option is available, select Create New to configure the dynamic mapping.

Dynamic mapping

Remove an object

To remove an object, browse to the object’s location in the object tree menu, select the object in the object list, and either click on the Delete button, or right-click on the object name and select Delete from the menu.

Edit an object

After editing an object in the object database, the changes are immediately reflected within the policy table in the Web-based Manager; no copying to the database is required.

To edit an object:

1. Browse to the location of the object that you want to edit in the object tree menu.
2. From the object list in the lower content pane, do one of the following:

3.Double-click on the name of the object to be edited

4.Right-click on the name of the object to be edited and select Edit from the menu.

5. Edit the information as required, and select OK.

Clone an object

If a new object that you are creating is similar to a previously created object, the new object can be created by cloning the previous object.

To clone an object:

1. Browse to the location of the object that is to be cloned in the object tree menu.
2. Right-click on the object or group and select Clone from the menu. The Edit dialog box opens.
3. Adjust the information as required, and then select OK to create the new object.
4. Browse to the location of the object in the object tree menu or policy.
5. Right-click on the object or group and select Where Used from the menu.

Search objects

The search objects tool allows you to search objects based on keywords.

To dynamically search objects:

1. Browse to the object type that you would like to search in the object tree menu.
2. In the search box on the right side lower content frame toolbar type a search keyword. The results of the search are updated as you type and displayed in the object list.

Drag and drop objects

Objects can be dragged and dropped from the object frame, or from other policies, into specific cells of a given policy.

For example, an address object can be dragged into the source or destination cells of a policy.

One or more objects can be dragged at the same time. When dragging a single object, a box beside the pointer will display the name of the object being dragged. When dragging multiple objects, the box beside the pointer will show a count of the number of objects that are being dragged.

The cells or columns that the object or objects can be dropped into will be highlighted in the policy package pane. After dropping the object or objects into a cell or column, the object will immediately appear in the cell as part of the policy, or in all the cells of that column.

CLI-Only objects

FortiManager v5.2.0 or later adds the ability to configure objects in the Web-based Manager which are available only configurable via the FortiOS command line interface.

CLI only objects example