| Type of address object and the entry: IP Netmask —The IPv4 or IPv6 address or
IP address range using the following notation: ip_address/ mask or ip_address where
the mask is the number of significant binary digits used for the
network portion of the address. Ideally, for IPv6 addresses, you
specify only the network portion, not the host portion. For example: 192.168.80.150/32 —Indicates one address. 192.168.80.0/24 —Indicates all addresses from 192.168.80.0
through 192.168.80.255.
IP Range —A range of addresses using the
following format: ip_address- ip_address where
both ends of the range are IPv4 addresses or both are IPv6 addresses.
For example: 2001:db8:123:1::1-2001:db8:123:1::22 IP Wildcard Mask —An IP wildcard address
in the format of an IPv4 address followed by a slash and a mask
(which must begin with a zero); for example, 10.182.1.1/0.127.248.0.
In the wildcard mask, a zero (0) bit indicates that the bit being
compared must match the bit in the IP address that is covered by
the 0. A one (1) bit in the mask is a wildcard bit, meaning the
bit being compared need not match the bit in the IP address that
is covered by the 1. Convert the IP address and the wildcard mask
to binary. To illustrate the matching: on binary snippet 0011, a
wildcard mask of 1010 results in four matches (0001, 0011, 1001,
and 1011).
You can use an address object of type IP Wildcard
Mask only in a Security rule.
FQDN —The domain name. The FQDN initially
resolves at commit time. An FQDN entry is subsequently refreshed
based on the TTL of the FQDN if the TTL is greater than or equal
to the Minimum FQDN Refresh Time; otherwise the FQDN entry is refreshed
at the Minimum FQDN Refresh Time. The FQDN is resolved by the system
DNS server or a DNS proxy object if a proxy is configured.
|