topic Re: remove retired firewall pair from panorama rules in Expedition Discussions

remove retired firewall pair from panorama rules

Laura_Penhallow — Wed, 22 Aug 2018 10:22:53 GMT

hi there

We've recently retired a data centre, including the firewall pair that was there. However, this firewall pair appears in approx 240 security rules currently - which would be quite time consuming to remove them from each rule manually to finish the decom.

Is this something that Expedition can do? Or is this better served via XML?

thanks in advance for your advice!

Laura

Re: remove retired firewall pair from panorama rules

alestevez — Mon, 27 Aug 2018 14:30:31 GMT

Are you talking about having the serials in some rules as target? or an address object who describes the firewall and its used as source or destination in those rules?

Re: remove retired firewall pair from panorama rules

Laura_Penhallow — Tue, 28 Aug 2018 08:48:42 GMT

Hi - yes, I'm talking about this serial being a target in 240 + rules as part of the device group. thanks for any ideas you have to speed up the removal!

Re: remove retired firewall pair from panorama rules

alestevez — Tue, 28 Aug 2018 08:55:41 GMT

Then its easy 🙂

Just select the rules and use MULTIEDIT, go to TARGET and remove the Serials you want, click on SAVE and That's it !

Re: remove retired firewall pair from panorama rules

Laura_Penhallow — Tue, 28 Aug 2018 08:57:12 GMT

brilliant!! That's what I was hoping for! I'm standing up expedition later this week and this will be one of my first tasks with it.

thank you!! 🙂

Re: remove retired firewall pair from panorama rules

cheetoz23 — Sun, 01 Aug 2021 11:33:55 GMT

thanks