topic Filter Security Policy by Profile column? in General Topics

Filter Security Policy by Profile column?

yesitisme_007 — Thu, 09 Feb 2012 17:14:08 GMT

How do I filter the Security Policy to show only those rules that have a specified profile, or no profile, assigned? We have a large, ~560 rule rulebase. I need to be able to easily find rules that have a specific profiles assigned. Scrolling through the entire rulebase rule-by-rule is more than time consuming - it easily leads to missing what you are looking for.

Re: Filter Security Policy by Profile column?

mikand — Thu, 09 Feb 2012 17:19:17 GMT

I think you can do this in the CLI, but no idea on exact syntax or if this is possible to do from the GUI.

A dirty workaround would be if you export running-config.xml to your local computer and search from a texteditor, but thats just wrong and dirty :smileysilly:

Re: Filter Security Policy by Profile column?

sebastian — Thu, 30 Oct 2014 11:42:36 GMT

Hi all,

use the following filters to find out which rules use a specific security profile.

If you use profiles as profile type:

Antivirus

( profile-setting/profiles/virus/member eq 'NAME' )

Vulnerability Protection
( profile-setting/profiles/vulnerability/member eq 'NAME' )

Anti-Spyware

( profile-setting/profiles/spyware/member eq 'NAME' )

URL Filtering

( profile-setting/profiles/url-filtering/member eq 'NAME' )

File Blocking

( profile-setting/profiles/file-blocking/member eq 'NAME' )

Data Filtering

( profile-setting/profiles/data-filtering/member eq 'NAME' )

Profile Typ = Group

( profile-setting/group/member eq 'NAME' )

reminder: use neq (not equal) to show all rules they dont use the group/profile.