All objects within an ADOM are managed by a single database unique to that ADOM. Objects inside that database can include items such as addresses, services, attack definitions, antivirus signatures, Web Filtering profiles, etc.

When making changes to an object within the object database, changes are reflected immediately within the policy table Web-based Manager. No copying to the database is required.

Dynamic objects are used to map a single logical object to a unique definition per device. For example, addresses, interfaces, virtual IPs and an IP pool can all be addressed dynamically.