1. A computer implemented method comprising: generating an object-relation user interface for viewing security configurations of network security devices on a display, wherein the generating includes: generating for display by a computer device and displaying selectable device icons that represent respective network security devices; responsive to a selection of one of the displayed device icons, generating for display by the computer device and displaying selectable interface icons that represent respective network interfaces used by the network security device represented by the selected device icon; responsive to a selection of one of the displayed interface icons, generating for display by a computer device and displaying selectable policy icons that represent respective security polices used by the network interface represented by the selected interface icon, the security policies including security rules, each security rule including objects arranged according to a predetermined rule syntax to control access to a resource, at least some of the objects having respective object values; responsive to a selection of one of the displayed policy icons, generating for display by a computer device and displaying selectable object group icons that represent respective groups of objects used in the security policy represented by the selected policy icon; responsive to a selection of one of the displayed object group icons, generating for display by the computer device and displaying for the security rule objects in the group of objects represented by the selected object group icon respective object values in an editable form that permits editing of the object values, including adding a new object value, deleting one of the object values, or modifying one of the object values of the object-relation user interface for viewing the security configurations of the network security devices; generating for concurrent display a selectable identical filter, a selectable similar filter, and the object group icons; receiving a selection of either the identical filter or the similar filter; in response to a selection of the identical filter being received; identifying identical objects among the object groups represented by the object group icons, and generating for display the identical objects; and in response to a selection of the similar filter being received; identifying similar objects among the object groups represented by the object group icons, and generating for display the similar objects.