topic Re: Unable to See Rule in Output of Running Config in General Topics

Unable to See Rule in Output of Running Config

c89217 — Mon, 14 Mar 2022 19:41:24 GMT

Hello. I have read only access to our firewall and in the past could do the command show config running and see all the rules in use. Now, I don't see near as many as used to. If I go to the web GUI and Monitor tab for instance, there is a rule named APP34-ROW-09-PAN that's actively allowing or denying traffic. If I search this in the cli output of the running config, I find no trace of it. Is there some other command aside from show config running that'll show all the rules in place on the firewall?

Re: Unable to See Rule in Output of Running Config

SutareMayur — Tue, 15 Mar 2022 03:18:21 GMT

Hi @c89217 ,

Quick questions -

1. Is it panorama managed gateway?

2. Do you have multi vsys on the firewall?

Re: Unable to See Rule in Output of Running Config

c89217 — Wed, 16 Mar 2022 17:36:27 GMT

SutareMayur

Hello.

Yes, it appears to be Panorama managed as two servers are specified for Panorama Servers on the Device tab.

Yes, there are multi vsys on the firewall.

Re: Unable to See Rule in Output of Running Config

c89217 — Wed, 16 Mar 2022 18:10:03 GMT

I believe I found how to see the rules. On the CLI I set the vsys I want to be into set system setting target-vsys vsys2

then use command show running security-policy

Re: Unable to See Rule in Output of Running Config

SutareMayur — Thu, 17 Mar 2022 03:33:05 GMT

@c89217

Glad to know that you are able to see the rules.

I was also suspecting same in case of multi-vsys but wanted to confirm first if you're running same.