SonicOS 7 Match Objects

Adding a Dynamic External Object

To add a Dynamic External Object

  1. Navigate to Object > Match Objects > Dynamic Group page.
  2. Click the Add button. The Add Dynamic External Object dialog displays.

  3. Enter a unique, descriptive name for the dynamic external address group in the Name field. “DEAG_” is automatically prepended to the name when saved.
  4. The Type field is set to Address Group, with no other options.
  5. In the Zone Assignment drop-down list, select the zone for the Dynamic External Address Group.
  6. Select the Enable Periodic Download option for ongoing, periodic downloads of the Dynamic Address Group File.
  7. If Enable Periodic Download is enabled, select the number of minutes or hours between downloads in the Download interval field. You can select one of:

    • 5 minutes
    • 15 minutes
    • 1 hour
    • 24 hours
  8. Select the type of protocol to use for downloading the DEAG file from the protocol drop-down list. The choices are FTP or HTTPS. The remaining fields in the dialog are different for FTP and HTTPS.
  9. If you selected FTP as the protocol, specify the following:

    • Server IP Address – the IP address of the FTP server where the DEAG file resides

      See About the Dynamic External Address Group File for information about the DEAG file.

    • Login ID – the user name for logging into the FTP server
    • Password – the password for logging into the FTP server
    • Directory Path – the folder in which the DEAG file resides on the FTP server
    • File Name – the name of the DEAG file on the FTP server
  10. If you selected HTTPS as the protocol, specify the following:

    • URL Name – the URL which has the list of IP addresses or FQDNs

      The URL Name should start with https:// and follow with the page name. This page contains the list of IP addresses or FQDNs.

  11. Click Save.

Based on the configuration, the firewall reads the list of IP addresses or FQDNs from the file or URL. Then SonicOS automatically creates the following:

  • Address group with the name provided in the Add Dynamic External Object dialog. This address group is read-only, meaning that you cannot edit or delete it.
  • Address objects for every valid unique IP address or FQDN in the file. These address objects are also read-only.

The individual address objects are then added to the Dynamic External Address Group / Dynamic External Object. You can use this in access rules and policies.

Was This Article Helpful?

Help us to improve our support portal

Techdocs Article Helpful form

Techdocs Article NOT Helpful form

  • Still can't find what you're looking for? Try our knowledge base or ask our community for more help.