Expedition ML process Sumarization Rule with Network

Stephane_Samba — Mon, 27 Mar 2023 12:46:16 GMT

Hello Team,

For my first post on the community !

For a customer case we want to use Expedition Palo in the aim to bulid security rules from permissive security rules.

Indeed, with an additional file we have the best practices (from IT service directly) about security rules to implement its. In the past time we built our own application (based on Python) to give the results.

This approach is similar to APG Tufin , and we want to join about this mecanism by the end.

In the POC architecture we got an issue on the Expedition process Machine Learning . For that we have followed the next instructions :

Import Logs from Logs firewall (ok)
Import backup of configuration file (ok)
Define the metrics on specific security rules in the goal to sumamarize them* (ok)

For the last point, we observed a different mecanism from our requirement.

In fact, we want to summarize some security rules by network. ML process got it but some cases must be excepted. In general the summarization is wrong so.

Our question is : Does it possible to export the generated output files (files created) from CLI about the ML processing ?

Our goal is to control this step and bring some changes about that.

I join you ML process on Expedition and focus on the result. In target, we want to export this content including the red boxes.

Thank you a lot !

Re: Expedition ML process Sumarization Rule with Network

lychiang — Mon, 27 Mar 2023 22:18:21 GMT

@Stephane_Samba you can export the ML result in to an excel file

Re: Expedition ML process Sumarization Rule with Network

Stephane_Samba — Thu, 30 Mar 2023 16:21:03 GMT

Thank you for your return but I know this feature. I'm searching to export the ML results from CLI (including much more files). From excel files output, that's only the results of security rules summarization .. Not need this content. I only try to know if there are some generated files during ML process (pre-process and post-process). In the aim to control ML process and it is possible to bring some settings incluing on this process.

topic Expedition ML process Sumarization Rule with Network in Expedition Discussions

Expedition ML process Sumarization Rule with Network

Re: Expedition ML process Sumarization Rule with Network

Re: Expedition ML process Sumarization Rule with Network