topic Re: Policy report for PCI in General Topics

Policy report for PCI

breedend — Tue, 04 Feb 2014 20:26:50 GMT

For PCI compliance, I need to submit poof of our firewall policy (we use a PA3020). Is there a standard report that I can run that summarizes our Policies, or is there a way to export the policies to a PDF or spreadsheet? On our old ASA I could simply do an export to HTML or spreadsheet which I could attach to my report.

Thanks in advance.

David

Re: Policy report for PCI

HULK — Wed, 05 Feb 2014 17:29:18 GMT

Hello David,

PAN does not have an option at this point of time to export policies to a CSV or PDF reports. There is a feature request has been submitted for the same. See below FR details:

Export security policies as CSV or PDF format

Customer wants to check security policies by hard/soft copy more visually as csv or pdf format. Current xml-base or set-base configuration list is difficult to see/check, especially if there are a lot of entries.

Priority: Low
FR ID: 842

As a workaround, you can collect the "set" command from the CLI:

admin@PAN> set cli config-output-format set

admin@PAN# edit rulebase security

[edit rulebase security]

admin@PAN# show

Export the running config in a XML file and capture the required security policy config.

Hope this helps.

Thanks

Re: Policy report for PCI

MSchlenker — Fri, 07 Mar 2014 19:00:52 GMT

I have the same need as David:

I tried the commands suggested by HULK or our test PA-500:

Results:

xxxxxxxx@PANSQA01(active)> set cli config-output-format set
xxxxxxxx@PANSQA01(active)> edit rulebase security
Unknown command: edit
xxxxxxxx@PANSQA01(active)> show

Invalid syntax.
xxxxxxxx@PANSQA01(active)>

===============================

Any other suggestions?

Re: Policy report for PCI

jvalentine — Fri, 07 Mar 2014 20:24:57 GMT

set cli config-output-format set

configure

show

Re: Policy report for PCI

Retired Member — Sat, 08 Mar 2014 07:05:04 GMT

You may import them to Excel and save as PDF.

Importing rulebase into Excel using XML API