Do we support Wildcard with IP address objects?

How to use a wildcard with IP address objects such as 10.*.60.10?

• PAN-OS.
• Address objects.

1. Using Wildcards in IP address objects is supported from PAN-OS 9.0.  you can create an address object similar to 10.*.60.10.
2. Create an Address Object: go to Objects > Addresses > Add
   1. Name - 10.x.60.10-wildcard
   2. Type - IP Wildcard Mask
   3. Prefix - 10.0.60.10/0.255.0.0
3. You can use this object in any Security Policy.

Restrictions:

1. You can reference an address object of type IP Wildcard Mask only in a Security rule.
2. No Negation: You cannot check the "Negate" box when using a wildcard object in a rule.
3. You can't reference an address object of type IP Wildcard Mask in Address-Groups
4. You can't configure an address object of type IP Wildcard Mask with the first IP address octet of '0' and the first subnet octet of '255'
   1. If you wish to get a wildcard for the last 2 octets in an IP address, for example x.x.60.10, you need to configure 2 IP Wildcard Mask objects:
      1. Object 1: 0.0.60.10 / 127.255.0.0
         • Covers 0.x.60.10 through 127.x.60.10.
      2. Object 2: 128.0.60.10 / 127.255.0.0
         • Covers 128.x.60.10 through 255.x.60.10.

For additional information:

https://docs.paloaltonetworks.com/network-security/security-policy/administration/objects/addresses