Object groups are used to group hosts/networks, services, protocols, and icmptypes. Object grouping provides a way to reduce the number of access rules required to describe complex security policies.