topic Re: CLI listing of all Security Policies in General Topics

CLI listing of all Security Policies

Jshively1 — Tue, 21 Oct 2014 12:59:59 GMT

We are trying to reduce our unused Security Policies. We created a custom report to show Security policies run in the past 30 days.

I would like a listing of all Security Policies and then remove the Policies that have not been run in 30 days. I am trying to figure a CLI command to list all security Policies. The custom report only shows policies executed, not policies that have not run(as expected) Thanks in advance

Re: CLI listing of all Security Policies

ajbool — Tue, 21 Oct 2014 13:03:44 GMT

Try "show running security-policy".

Re: CLI listing of all Security Policies

hshah — Tue, 21 Oct 2014 13:27:45 GMT

Hello Jshivly,

Try following command, it will display all policy in running configuration. It display used and unused policy.

admin@21-PA-2020> show running security-policy

For more information on unused policy refer following document. Let me know if that helps.

How to Identify Unused Policies on a Palo Alto Networks Device

Regards,

Hardik Shah

Re: CLI listing of all Security Policies

Jshively1 — Tue, 21 Oct 2014 13:44:10 GMT

Thanks for the answer and the link.........much appreciated.

Re: CLI listing of all Security Policies

hshah — Tue, 21 Oct 2014 14:14:43 GMT

Hi Jshively,

Feel free to ask me additional queries.

Regards,

Hardik Shah

Re: CLI listing of all Security Policies

Jshively1 — Thu, 23 Oct 2014 18:35:39 GMT

got it and thanks for the reply, much appreciated....