article Duplicated Policies - How To Preview in Expedition Articles

Duplicated Policies - How To Preview

sjanita — Fri, 28 Jun 2019 18:36:41 GMT

When seeing counters increment for Duplicated Policies, this is indicating there are policies with the exact same name, which can cause a conflict within PAN-OS and cause a commit to fail.

The Duplicated Policies do not indicate an overlap or "Shadow" of policies.

The duplicated policy count can be seen in the PROJECT STATISTICS dashboard.

To view the policies with duplicated names you can use the filter by creating a filter for:

POLICIES > Security > FILTER > MERGE > POLICIES > Security Policies > Click the box for Rule Name

Clicking on each case listed in the results will display the policies with the same name in the background. The policies displayed in the backgroud can be edited to change the names.

Re: Duplicated Policies - How To Preview

kvbranden — Thu, 02 Dec 2021 17:57:42 GMT

Why would this be an issue? I've got 2 Vsys which each have double named policies. Is it really an issue or is it just against best practice?

Re: Duplicated Policies - How To Preview

lychiang — Thu, 02 Dec 2021 18:37:29 GMT

You can have duplicate rule name between different device group if they are not parent and child. for example, you can have security rule name "Test" in both DG1 and DG2 if they are not parent and child , but you can't have same rule name among shared and DG1 since shared is parent of DG1

Re: Duplicated Policies - How To Preview

JaysonJohn — Tue, 03 Dec 2024 03:28:12 GMT

Completed firmware upgrade from 11.0.5 -> 11.1.5h1, and facing duplicate rules, which preventing new rules from being committed. I am looking for an article from PA for reference on this issue to be presented to my stakeholders. Can anyone help?

Re: Duplicated Policies - How To Preview

dpuigdomenec — Tue, 03 Dec 2024 12:54:18 GMT

Hi @JaysonJohn

You can use Expedition. After importing your policy you can go to Policies, filter by duplicated name and apply an option to do the renaming.

Hope this helps,