topic Custom Filter for Security Policy Source and Destination in Expedition Discussions

Custom Filter for Security Policy Source and Destination

HowsThisWork — Tue, 28 Jul 2020 23:54:09 GMT

I have a use case where I need to search Security Policies based on the source or destination being in certain network ranges. The filters seem to work fine until the source or destination is an object of Type=IP Range or an address-group of Type=dynamic. Those two types of objects seem to get skipped over by the filter.

Is anyone aware of a different method to get around this?

Possibly related, anyone know what the search options of contains.recursive and equal.recursive do? I've tried playing around with them but I can't figure it out.

Re: Custom Filter for Security Policy Source and Destination

lychiang — Wed, 29 Jul 2020 00:08:24 GMT

Best option will be use filter like below shown in screenshot:

source in network (yournetwork)

destination in network (yournetwork)

Re: Custom Filter for Security Policy Source and Destination

HowsThisWork — Wed, 29 Jul 2020 00:11:00 GMT

Yea, that's what I've been doing and it works great. But it doesn't seem to match when the source or destination object is an ip range or a dynamic address-group.