Creating object configurations

You can create new object configurations before including them in policy packages. Alternatively, you can also create policy packages using existing object configurations.

To create object configurations in Global Database:

1. Change the ADOM to Global Database.
2. Click Object Configurations. The Object Configuration pane shows the following object categories.
3. Click Create New to create new objects in each category.
   • Normalized Interface
     • Normalized Interface
     • Virtual Wire Pair
   • Firewall Objects
     • Addresses
     • Wildcard FQDN Addresses
     • Services
     • Schedules
     • Virtual IPs
     • IP Pools
     • Traffic Shapers
     • Shaping Profile
   • Security Profiles
     • AntiVirus
     • Web Filter
     • Application Control
     • Intrusion Prevention
     • SSL/SSH Inspection
     • Application Signatures
     • IPS Signatures
   • Fabric Connectors
     • SDN
     • Threat Feeds
     • Endpoint/Identity
   • User & Authentication
     • User Definition
     • User Groups
     • LDAP Servers
     • RADIUS Servers
     • TACACS+ Servers
     • SMS Services
     • FortiTokens
   • Script
     • Scripts
4. Click OK after creating the objects in each category.
5. (Optional) Additional object configuration options can be enabled in Tools > Feature Visibility.

FortiGate global objects

FortiManager supports FortiGate global objects. FortiGate global objects are identified with the prefix “g-“.

When a FortiGate configuration using FortiGate global objects is imported into FortiManager, the global objects are added to the FortiManager as ADOM-level objects.

If FortiGate global objects (g-) are referenced in a FortiManager policy package, they are installed to the FortiGate Global VDOM and are usable in other VDOMs.

Below is a list of FortiGate global objects supported by FortiManager:

• system replacemsg-group
• system external-resource
• webfilter profile
• firewall wildcard-fqdn custom
• ips sensor
• sctp-filter profile
• application list
• dlp data-type
• dlp dictionary
• dlp sensor
• dlp profile
• webfilter search-engine
• antivirus profile
• file-filter profile
• wireless-controller utm-profile
• firewall ssh local-key
• firewall ssh local-ca