86
•
Panorama
6.1
Administrator’s
Guide
©
Palo
Alto
Networks,
Inc.
Manage
Device
Groups
Manage
Firewalls
Create
Objects
for
Use
in
Shared
or
Device
Group
Policy
An
object
is
a
container
for
grouping
discrete
identities
such
as
IP
addresses,
URLs,
applications,
or
users,
for
use
in
policy
enforcement.
You
can
use
Panorama
to
create
and
clone
all
objects
in
the
Objects
tab
such
as
Address/Address Group, Region or User/User Group
.
These
policy
objects
can
be
shared
across
all
managed
devices
or
be
specific
to
a
device
group.
A
shared
object
is
a
reusable
component
that
is
created
on
Panorama.
It
is
shared
across
all
device
groups
and
can
be
referenced
in
shared
policies
or
in
device
group
policies.
It
reduces
administrative
overhead
and
ensures
consistency
in
configuring
multiple
firewalls.
A
device
group
object
is
specific
to
the
device
group
in
which
it
is
defined.
It
can
be
used
only
in
the
device
group
where
it
is
created
and
is
not
visible
when
configuring
other
device
groups
or
shared
rules
and
objects.
For
example,
a
device
group
object
for
a
set
of
web
server
IP
addresses
that
is
created
in
the
datacenter
device
group
is
not
available
for
use
in
any
other
device
group
or
for
use
in
shared
policies.
Step
2
Begin
centrally
administering
policies
on
the
devices
in
the
device
group(s).
•
•
•
•
•
For
an
example,
see
Create
Objects
for
Use
in
Shared
or
Device
Group
Policy
•
Create
a
shared
object.
In
this
example,
we
will
add
a
shared
object
for
URL
Filtering
categories
for
which
we
want
to
be
trigger
an
alert.
1.
Select
the
Objects > Security Profiles > URL Filtering
tab
and
click
Add.
If
the
Objects
tab
does
not
display,
see
to
add
a
device
group.
The
Panorama
web
interface
displays
the
Objects
tab
only
if
you
have
created
a
device
group.
2.
Enter
a
Name
and
a
Description
.
3.
Select
the
Shared
check
box.
If
you
do
not
select
the
check
box,
the
object
will
be
a
part
of
the
device
group
that
currently
displays
in
the
Device Group
drop
‐
down.
4.
Select
the
check
box
next
to
the
URL Categories
for
which
you
want
to
be
notified
and
select
Alert
in
the
Action
column,
then
click
OK
.
5.
Click
Commit
,
and
select
Panorama
as
the
Commit Type
.
Add
a
Device
Group
(Continued)
