topic Re: Search security policies of network or related IPs in General Topics

Search security policies of network or related IPs

Charlie80 — Mon, 27 Feb 2023 12:32:32 GMT

Hi,

I need to migrate a vlan from a security zone to a new one.

Which is the best way to search the related rules?

Ae1.1200 10.100.15.0/24

I need to identify the rules of this network and the rules that use a specific ip like 10.100.15.20 and so one.

Re: Search security policies of network or related IPs

TomYoung — Mon, 27 Feb 2023 14:15:28 GMT

Hi @Charlie80 ,

If you use the Global Find feature for 10.100.15, it will show you every where the string is in the config. If you did not use objects in the security policy, the matching rules will show under the Security Rules section.

If you used address objects in the security policy, you can expand the matching address objects, and it will show you the security policy rules where those are used. https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/firewall-administration/use-the-web-interface/use-global-find-to-search-the-firewall-or-panorama-management-server

You can then click on the rule from the drop down, and you will pivot to Policies > Security to edit the rule.

The filter bar on the Policies > Security page does not show objects that match 10.100.15, which is probably why you asked.

Thanks,

Tom

Re: Search security policies of network or related IPs

Raido_Rattameister — Mon, 27 Feb 2023 14:28:59 GMT

One trick you can use is to search for "0.100.15.20" instead of "10.100.15.20"
If you remove one number from IP then filter is looking for exact text and don't match to 10.100.15.0/24 IPs any more.