Variable objects

Earlier in this chapter, I mentioned variable objects, and now is the time to expand on them a bit. Unlike static objects, which either have static IP addresses or use DHCP but are represented by static objects, such as networks or ranges in the policies, variable objects' addresses can be changed dynamically and are not confined by predefined networks or ranges. As was mentioned earlier, these could be thought of as groups with conditional membership defined outside of the Check Point objects database.

I would have used the term dynamic objects to describe this category, but that term is already reserved by one of the object types under the broader variable objects definition.

So, let's start with dynamic objects since this term has just come up.

Dynamic objects

When a new dynamic object [1] is created in New | Network Object | Dynamic Objects | Dynamic Object, the object itself is empty – it does not have anything in its properties except...