Organization Policy Objects and Groups Configuration

Dashboard Location: Organization > Configure > Policy Objects

Organization policy objects and groups configuration in Meraki provides administrators with comprehensive network object definition capabilities, enabling centralized security policy management, reusable network definitions, scalable firewall rule creation, and consistent security enforcement across multiple networks. This functionality supports network segmentation strategies, security policy standardization, firewall rule optimization, access control consistency, and centralized object management while providing efficient policy deployment and maintenance capabilities. Policy objects are essential for enterprise security architectures, consistent rule enforcement, scalable policy management, compliance standardization, and maintaining organized security infrastructure while supporting complex network environments and multi-site deployments.

Example-1: The example below demonstrates policy object configuration.

This configuration creates reusable network policy objects for centralized security and access control management. The example includes IP address groups, port groups, and application objects for streamlined policy administration across multiple networks.

There are two policy objects defined: test cidr, a CIDR type under the network category representing the network 10.0.0.0/24, and test fqdn, an FQDN type also under the network category representing the domain www.cisco.com. Additionally, there are two policy object groups named test cidr and test fqdn, both categorized as NetworkObjectGroup, which include the corresponding policy objects by their names.

meraki:
  domains:
    - name: !env domain
      administrator:
        name: !env org_admin
      organizations:
        - name: !env org
          policy_objects:
            - name: test cidr
              category: network
              type: cidr
              cidr: 10.0.0.0/24
            - name: test fqdn
              category: network
              type: fqdn
              fqdn: www.cisco.com
          policy_objects_groups:
            - name: test cidr
              category: NetworkObjectGroup
              object_names:
                - test cidr # This references the "test" policy object by name
            - name: test fqdn
              category: NetworkObjectGroup
              object_names:
                - test fqdn # This references the "test" policy object by name