Create a Firepower Network Object

Note

If cloud-delivered Firewall Management Center is deployed on your tenant:

When you create a network object or group on the Objects > FTD Network Objects or Objects > FDM Objects or Objects > ASA Objects page, a copy of the object is automatically added to the Objects > Other FTD Objects page and vice-versa. In addition, an entry is created in the Devices with Pending Changes page for each on-prem management center with Discover & Manage Network Objects enabled, from which you can choose and deploy the objects to the on-prem management center on which you want these objects.

Procedure

Step 1

In the CDO navigation bar on the left, click Objects > FDM Objects.

Step 2

Click the blue plus button to create an object.

Step 3

Click FTD > Network.

Step 4

Enter an Object Name.

Step 5

Select Create a network object.

Step 6

In the Value section:

Select eq and enter a single IP address, a subnet address expressed in CIDR notation, or a Partially Qualified Domain Name (PQDN).
Select range and enter an IP address range.

Note	Do not set a host bit value. If you enter a host bit value other than 0, CDO unsets it while creating the object, because the cloud-delivered Firewall Management Center only accepts IPv6 objects with host bits not set.

Step 7

Click Add.

Attention: The newly created network objects aren't associated with any FDM-managed device as they aren't part of any rule or policy. To see these objects, select the Unassociated objects category in object filters. For more information, see Object Filters. Once you use the unassociated objects in a device's rule or policy, such objects are associated with that device.