Abstract: A method comprises receiving, from an internetworking security device, configuration data comprising a plurality of network address translation (NAT) statements, wherein one or more of the NAT statements reference one or more object-groups or nested object-groups; using a computing device, reading each of object groups in the configuration data and creating and storing a first table in memory, the first table comprising one or more first table entries each corresponding to one of the object-groups and parameter values of the object-groups; using the computing device, creating and storing a second table in the memory, the second table comprising one or more second table entries, wherein each of the second table entries corresponds to one of the NAT statements, and including resolving each of the object-groups into one or more corresponding second table entries; using the computing device, generating and causing displaying a visual representation or presentation that includes, for each of the NAT statements, ea