# Custom Attack Object Group Configuration

A policy applying Deep Inspection (DI) can reference an attack object group, but not an individual attack object. Therefore, after you define one or more custom attack objects, you must add them to a custom attack object group for use in policies.

### To Create a Custom Attack Object Group and Add Custom Attack Objects to the Group

1. Type a name beginning with CS: in the Group Name field.

2. Select a custom attack object in the Available Members column.

Note: Other custom attack object groups (if there are any) also appear in the Available Members column. You can nest one custom attack group inside another. The security device automatically checks that a group does not accidentally contain itself as a member.

3. Click the << button to move it to the Selected Members column.

4. (Optionally) Repeat steps 2 and 3 to move other available members into the group.

5. Click OK to save the group.