Table 48: Polymorphic Objects; Access Control Of Polymorphic Object; Validation Of Polymorphic Object; Supported Polymorphic Object Categories - Juniper NETWORK AND SECURITY MANAGER 2010.3 - ADMINISTRATION GUIDE REV1 Administration Manual

Copyright © 2010, Juniper Networks, Inc.
You can customize a shared object by adding, deleting, or modifying an entry in the
mapping table.
The regional server administrator can customize polymorphic objects by adding local,
concrete shared objects to it. The mapping table shows only the current domain's entries.
Therefore, if an administrator is in the global domain, no subdomain entries are visible.
This section contains the following topics:
Access Control of Polymorphic Object on page 523
Validation of Polymorphic Object on page 523
Supported Polymorphic Object Categories on page 523

Access Control of Polymorphic Object

Table 48 on page 523 defines accessibility of polymorphic objects in different servers.

Table 48: Polymorphic Objects

Create
Customize mapping table
Change name/color and
other attributes
Delete

Validation of Polymorphic Object

When an administrator first creates a polymorphic object, the customization state is set
to pending. The validation routine generates a warning/error message when encountering
the pending state. Validation of a polymorphic object is triggered if an object is used by
a rule and that rule is edited or viewed in the policy manager.

Supported Polymorphic Object Categories

Polymorphic objects are in the same category as concrete objects of the same nature.
The shared object type attribute includes a new value for polymorphic objects of a specific
category. The following objects categories can have polymorphic type: Address, Service,
Zone, Global NAT and Routing Instance.
Zone is a polymorphic shared object at the Central Manager level. After a global pre/post
rule is pushed, zone objects resolve into names in prerules and postrules. A vsys zone
can only be supported with a polymorphic zone. Administrators must map every vsys
manually with a vsys zone name.
Polymorphic objects Polymorphic objects
created and used in created in a Central
Central Manager Manager, but used in
Server a regional server
Yes No
No Yes
Yes No
Yes Yes if not referenced
by central rules.
Chapter 9: Configuring Security Policies
Polymorphic
objects created
and used in a
regional server
Yes
Yes
Yes
Yes
523