Cisco Cisco Firepower Management Center 4000

Any

You can add a literal value to the list of original and translated conditions for the following condition 
types:

Networks

Ports

For network conditions, you type the literal value in a configuration field below the list of original or 
translated conditions.

In the case of port conditions, you select a protocol from a drop-down list. When the protocol is 

All

 and, 

optionally, when the protocol is 

TCP

 or 

UDP

, you type a port number in a configuration field.

Each relevant conditions page provides the controls needed to add literal values. Values you type in a 
configuration field appear as red text if the value is invalid, or until it is recognized as valid. Typed values 
change to blue text as you type when they are recognized as valid. A grayed 

 button activates when 

a valid value is recognized. Literal values you add appear immediately in the list of selected conditions.

See the following sections for specific details on adding each type of literal value:

Any

Objects that you create in the object manager (

) are immediately available for 

you to select from relevant lists of available NAT rule conditions. See 

 for information.

You can also create objects on-the-fly from the NAT policy. A control on relevant conditions pages 
provides access to the same configuration controls that you use in the object manager.

Individual objects created on-the-fly appear immediately in the list of available objects. You can add 
them to the current rule, and to other existing and future rules. On the relevant conditions page, and also 
on the policy Edit page, you can hover your pointer over an individual object to display the contents of 
the object, and over a group object to display the number of individual objects in the group.

Any

You can match traffic with one or more rule conditions. See the following sections for more information:

 explains how to match traffic by security zones 

that you create using the object manager.

 and 

 explain how to match traffic by IP address or address 

block.