topic Re: Is there any way to filter on an address group? in General Topics

Is there any way to filter on an address group?

bgranholm — Thu, 09 May 2013 18:26:43 GMT

I did some simple things in the hope of being able to report more easily, such as defining RFC 1918 space, but I cannot find a way to filter on that. Is there a way to do so?

Re: Is there any way to filter on an address group?

NGS_SOC — Thu, 09 May 2013 19:59:30 GMT

Do you mean filtering in traffic log monitoring tab?

RFC 1918 space can be easily done with custom filter for example taking source address

(addr.src in 10.0.0.0/8 ) or (addr.src in 172.16.0.0/12 ) or (addr.src in 192.168.0.0/16 )

In custom reports filter works as above

Re: Is there any way to filter on an address group?

bgranholm — Fri, 10 May 2013 20:44:13 GMT

Yes, I did mean that and in custom reports which use the same filter structure.

Maybe RFC 1918 space is a bad example. We have a branch structure in our organization and we have branches ip addresses defined in the addresses and address groups, and those branches are also grouped together with their own address groups. It would be VASTLY easier to write filters for these groups when they are often not contiguous IP space rather than these extremely long strings of filtering when it could be as simple as addr in <Group Name>.

This would be a great feature.

Re: Is there any way to filter on an address group?

NGS_SOC — Fri, 10 May 2013 20:49:26 GMT

I agree with you, if you need in filter variables already set often the custom saved filter are not enough. Ask to your SE, maybe there is a room for this feature in PAN future