topic Re: Firewall Rule Consolidation in Expedition Discussions

Firewall Rule Consolidation

Signet — Mon, 04 Mar 2019 02:11:55 GMT

Hi All,

I am trying to consolidate firewall rules on one Palo Alto firewall. I have uploaded the config to Expedition but I am struggling to understand how to run the analysis that will provide me with information on duplicate rules or suggested consolidation. Would someone be able to provide me with some detailed instructions? Any help is appreciated!

-Sig

Re: Firewall Rule Consolidation

sjanita — Mon, 04 Mar 2019 05:53:11 GMT

You can use the 'Merge' option, unser Filters (See attached graphic) to display which rules can be consolidated.

A common starting point to check for rules that can be merged are to filter on same From/Source/To/Destination. After deciding whether or not to merge the security policies you can then change or your match criteria (e.g. From/Source/To/Service or Application).

Once the results of the similar policies are highlighted you can then choose to 'Merge' the policies by using the merge option (see graphic 2).

Re: Firewall Rule Consolidation

Signet — Mon, 04 Mar 2019 18:32:26 GMT

That is exactly what I am looking for. Thank you Sjanita!