We’re excited to announce support for reusable Objects as a policy construct in Secure Access. Objects (Network, Port/Service etc.) are a common policy construct on NGFW platforms – Cisco or otherwise and now, within Secure Access SPA (Secure Private Access), you can create Network Objects, Service Objects and groups to add multiple objects of each type and use them to define Private Access policies
How do I create objects and use them in SPA policies?
Start by creating the objects you need to define the Private Access policy by navigating to Resources > Sources and destinations > Network and Service Objects and selecting ‘Add Object’ under the appropriate tab.
Network Objects (and Network Object groups): A network object can be defined with a Host, Range or Network with IPv6 support as well as support for wildcard masks. And multiple network objects can be bundled into a Network object group.
Service Objects (and Service Object groups): A service object can be defined with a Transport protocol and port (TCP and UDP only). And multiple service objects can be bundled into a Service object group.
Then, navigate to Secure > Policy > Access Policy > Add Rule > Private Access to create a Private Access rule. You will now be able to select Network Objects/groups as source(s) and Network objects/groups as well as Service objects/groups as destination(s).
For additional details on the feature, refer to: