topic Re: Can expedition help me to fine tune the policies based on PA - NGFW traffic logs in Expedition Discussions

Can expedition help me to fine tune the policies based on PA - NGFW traffic logs

Rizwan_Ali — Sun, 19 Mar 2023 11:45:42 GMT

Hi there ..

I have wide open policies with from ZaoneA to ZoneB or ZoneA to ZoneC with allowed full subnet and services any any ..

I want to ask , based of traffic logs which shows the source / destination IP addresses ... will PA expedition will help me to fine-tune the policies to provide the source / destination addresses in order to implement the more specific rules

Re: Can expedition help me to fine tune the policies based on PA - NGFW traffic logs

lychiang — Mon, 20 Mar 2023 15:38:32 GMT

@Rizwan_Ali Yes, you can use ML feature , please refer to the Log analysis feature guide below:

https://live.paloaltonetworks.com/t5/expedition-articles/expedition-documentation/ta-p/215619?attachment-id=10738

Also, you can reference to the tutorial video below:

https://www.youtube.com/playlist?list=PLD6FJ8WNiIqXAfspousboWn6AllrOWVMi