This image of the Rule Object Diagram shows how a Rule can only have one of the following objects as a parent: VLANInterface, TLS, Network, Vpn, Device, Interface, SubInterface, VCEndPoint, SAP, Domain, Site, Customer, SiteL2. Each of the parent objects can have any number of Rules as children.

Only one fault of each major minor code is allowed to be concurrently linked to an object.

Rule connects to Period, which is either a global template or locally defined one.