topic Re: Unused obj issue in Expedition Discussions

Unused obj issue

Charlie80 — Thu, 14 Mar 2024 11:59:19 GMT

I've imported a Panorama from xml to help me do a cleanup.

Panorama manage 2 device group called "intranet" and "internet"

I already knew about an unused service "tcp-2222".

This service it's used on Intranet but unused on Internet. If I set a "unused service" filter on Internet the tcp-2222 doesn't appear.

Why?

I know that i can found it as duplicate obj but i don't need it.

I would like to export a report of unused obj that cover the case of "tcp-2222" so the service will not added on the Intranet unused report but included in the internet unused report. It's possible?

Re: Unused obj issue

dpuigdomenec — Thu, 14 Mar 2024 20:41:34 GMT

Hi @Charlie80

Expedition only takes into consideration unused objects those ones that are not used in any DG.

In your case as the service is used in one of the DGs it will be showed always as used.

Hope this helps,

Best,

Re: Unused obj issue

Charlie80 — Fri, 15 Mar 2024 08:21:18 GMT

Okay. Is it possible to split the two DGs into different views as a project and force Expedition to analyze the DGs separately?

One solution could be to create 2 project, import the Panorama conf and delete 1 DG.
There is another and better way?

Re: Unused obj issue

dpuigdomenec — Fri, 15 Mar 2024 08:22:08 GMT

Hi @Charlie80

You can create a project loading the FW configuration. Not based on the DG but on the FWs included in that DG.

If an object is declared but not used on that FW context, then it will be showed as not used.

Hope this helps and let me know if you have any other question,

Best regards,

David

Re: Unused obj issue

Charlie80 — Fri, 15 Mar 2024 08:24:11 GMT

Ah yes. Export not the Panorama Conf but the Fw-Intranet conf and Fw-internet conf in two different prj.

Thanks