FirewallBuilder

When a firewall object is created from a template, its IP addresses might not match the addresses used in your network. This section demonstrates how these addresses can be changed.

We start with a firewall object created in with a three-interface template and the IP address used for the internal network is 192.168.1.0/255.255.255.0. Suppose we need to change it to 172.16.22.0/255.255.255.0. We need to change the IP address of the internal interface of the firewall, as well as the address used in the policy and NAT rules.

To begin, find the IP address of the internal interface of the firewall in the tree and double-click it to open it in the editor.

Figure 14.1. New Firewall

Edit the IP address (and possibly the netmask if needed), then click "Apply". This changes the IP address of the interface of the firewall.

Figure 14.2. Edit the Network Address

Now we need to change the IP address used in the rules. To do this, we create a new network object with the correct address and replace the object net-192.168.1.0 in all rules with this new network object.

Use New Object menu to create the network object.

Figure 14.3. Creating a New Network Object

A new network object is created with default name "New Network" and IP address 0.0.0.0.

Figure 14.4. New Object

Edit the object name and address, then click Apply.

Figure 14.5. Edit Name and Address

Select Object/Find to activate the search and replace dialog.

Figure 14.6. Activate Find Dialog

Drag and drop the object "net-192.168.1.0" from a policy rule or from its location in the "Standard" library to the left object field in the search and replace dialog.

Figure 14.7. Drag the Original Object to the Find Field

Locate the new network object you just created and drag and drop it to the right object field in the search and replace dialog.

Figure 14.8. Drag the New Object to the Replace Field

Change the scope to Policy of all firewalls and click Replace all. If you have many firewalls in the tree and you only want to replace in this one, use the scope policy of the opened firewall instead. A pop-up dialog appears telling you how many replacements have been done.

Figure 14.9. Drag the New Object to the Replace Field

Note how the search and replace function replaced the object "net-192.168.1.0" with "internal net" in the NAT rules as well.

If the IP address used for the DMZ network in this template does not match your configuration, you can change it using the same procedure.

Figure 14.10. New object used in all rule sets