topic Cleaning up rules in General Topics

Cleaning up rules

rivkin — Wed, 15 Apr 2015 17:37:50 GMT

So, I, like a number of people, converted from Cisco to PAN. We had a consultant in to help with the conversion, and he was assisting with the rule cleanup. However, a) a lot of rules came straight across as it was time-critical, so they are service based, and b) I have trouble wrapping my head around app-based policies. Is there a tool that can help with converting all of my port/protocol based rules to app policies? Something like the conversion tool, but for use post-cutover as opposed to during the conversion?

I just had to dump a list of policies for an auditor, and realized that we should be cleaning up so that humans that aren't us have a chance of reading/understanding these.

😉

Thanks!

Rich

Re: Cleaning up rules

Anon1 — Wed, 15 Apr 2015 18:59:27 GMT

The new Migration Tool Version 3 can support you in cleaning up the rules and implement App-ID. You can import PANW config, not only other vendor´s configs.

Re: Cleaning up rules

_slv_ — Thu, 16 Apr 2015 08:29:40 GMT

Where I can download Migration Tool Version 3 - I try in Software Updates - but I can't find it there.

Regards

Slawek

Re: Cleaning up rules

santonic — Thu, 16 Apr 2015 08:38:03 GMT

Download Migration Tool 3

Re: Cleaning up rules

_slv_ — Thu, 16 Apr 2015 10:46:47 GMT

Thx

Regards

Slawek