Palo Alto Networks Knowledgebase: Address/Address Group Objects Must Have Different Names
Address/Address Group Objects Must Have Different Names
Created On 02/08/19 00:05 AM - Last Updated 02/08/19 00:06 AM
Cortex Data Lake
PAN-OS 5.0, 5.1, 6.0, 6.1, 7.0
In Panorama, under Templates > Objects, Address and Address Group objects must have different names. This is unlike Service and Service Group objects, which can have the same names.
In this example, two address objects have been created: add1 and add2.
If an Address Group named add1 is created, the following error appears: Error: Operation failed : add1 is already in use.
Note: The Address and Address Group can have the same name as long as they are not in the same scope; one can be in Device Group and another in Shared.
If there are objects with the same name in the Address and Address Group, the one in the more specific scope, such as Device Group, takes precedence.
Using the same name for Service and Service Group objects is allowed on the Palo Alto Networks device.
For example, two service objects have been created: serv1 and serv2. A Service Group object with the same name as the Service object, serv1, can be created. The screenshot below shows the Service Group, serv1, which includes the serv2 Service object: