Skip to main content

Objects

An Object is a flexible and powerful way to group infrastructure elements, like network devices, interfaces, and end hosts. After an object is created, it can be referenced in Forward applications like Verify and Search to simplify the definition of policy checks and help when searching the network.

Objects Types​

Host Groups​

A Host Group is a name that can be used as a shorthand for multiple hosts. The user can create a new host group by providing a name for the group, a device or device's interface, and additional filters like subnets and MAC addresses.

Objects Host Group

Device Groups​

A Device Group is a name that can be used as a shorthand for multiple devices. The user can create a new device group by providing a name for the group and a device name pattern.

Objects Device Group

Interface Groups​

An Interface Group is a name that can be used as a shorthand for multiple interfaces. The user can create a new interface group by providing a name for the group, the interface name pattern, and, optionally, VLAN(s) and interface type to refine the selection.

Objects Interface Group

Header Sets​

A Header Set is a name that can be used as a shorthand for a set of packet header matching criteria. The user can create a new header set by providing a name for the set and by specifying at least one of the following header fields:

  • MAC address
  • Ethernet type
  • VLAN ID
  • IP address/subnet
  • IP Protocol
  • L4 ports

Objects Header Set

Edge Nodes​

An Edge Node is a user-defined network object that represents a network that the network administrator does not have the ability to collect from. An Edge Node can be added to an existing network snapshot by attaching it to a device interface (or sub-interface) to represent network entities that live at the edge of the collected and modeled network. Examples of Edge Nodes are routers, virtual routers, and VMware NSX virtual switches. Users can create a new Edge Node by providing a name, the interface it is connected to, and, optionally, IP subnets, VLAN, and MAC address. Adding Edge Nodes will trigger reprocessing of the snapshot so that they can be included as part of Path Analysis or Search. A message in the New Edge Nodes dialog warns the user about the snapshot reprocessing. Multiple Edge Nodes can be added before finalizing the process and starting reprocessing of the snapshot.

Objects Edge Nodes

Logical Networks​

A Logical Network is a collection of Devices and Edge Nodes that identify a portion of the network infrastructure.

Objects Logical Networks

Glob Syntax​

Wildcards can be specified during object definition, allowing matches of network objects matching specified criteria. The syntax used is glob patterns.

The possible glob wildcards are shown in the top-right corner of the current dialog box.

* = matches any number of any characters including none
? = matches any single character
[abc] = matches one character given in the bracket
[0-9] = matches one character from the range given in the bracket