topic Re: How can one go about identifying shadow rules? Are there any tools for this in the WebUI? in General Topics

How can one go about identifying shadow rules? Are there any tools for this in the WebUI?

omid.gulban — Tue, 29 Aug 2023 16:34:15 GMT

Are there any build-in tools in the WebUI to identify shadow rules?

I thank you in advance.

Re: How can one go about identifying shadow rules? Are there any tools for this in the WebUI?

Remo — Tue, 29 Aug 2023 21:02:55 GMT

Hi @omid.gulban

When you do a commit or validate the config prioe to a commit the firewall will show you shadowed rules:

Re: How can one go about identifying shadow rules? Are there any tools for this in the WebUI?

omid.gulban — Fri, 01 Sep 2023 12:02:23 GMT

Thanks @Remo!

I noticed that too but what about the ones that had been unresolved over time.

How can one go about identifying ALL existing shadow rules that have not been addressed.

Will this SHOW all of the shadow rules in the system?

Thank you

Re: How can one go about identifying shadow rules? Are there any tools for this in the WebUI?

Remo — Sun, 03 Sep 2023 06:16:54 GMT

I don't know the algorithm that checks for the shadow rules, but if you have more than one, then it will be shown there as a list. So yes, it will show you all shadowed security policy rules in the system.