 Re: Finding disused objects
I believe that the unused object query only references objects which are explicitly used. Automatically NAT'd objects that are not explicitly in use in your policy elsewhere will show up in the unused objects list. Could be a problem if you're permitting that NAT traffic through the security policy with a broader object instead of the specific NAT'd object. |