What can be achieved by disabling the Share Unused Address and Service Objects with Devices setting on Panorama?

Question

Options

• AIncrease the per-firewall capacity for address and service objects
• BReduce the configuration and session synchronization time between HA pairs
• CIncrease the backup capacity for configuration backups per firewall
• DReduce the number of objects pushed to a firewall

• A
  5% (1)
• B
  5% (1)
• D
  89% (17)

Explanation

Select this option (enabled by default) to share all Panorama shared objects and device-group- specific objects with managed firewalls. If you disable this option, the appliance checks Panorama policies for references to address, address group, service, and service group objects, and does not share any unreferenced objects. This option reduces the total object count by ensuring that the appliance sends only necessary objects to managed firewalls. If you have a policy rule that targets specific devices in a device group, then the objects used in that policy are considered used in that device group.

No community discussion yet for this question.