All objects within an ADOM are managed by a single database unique to that ADOM. Objects inside that database can include items such as addresses, services, Intrusion Protection (IPS) definitions, Antivirus (AV) signatures, Web Filtering profiles, etc.

When making changes to an object within the object database, changes are reflected immediately within the policy table in the Web-based Manager. No copying to the database is required.

Dynamic objects are used to map a single logical object to a unique definition per device. Addresses, interfaces, virtual IPs, and an IP pool can all be addressed dynamically.