topic Searching Policy for different security profiles in General Topics

Searching Policy for different security profiles

dpenhall — Thu, 30 Jan 2014 09:29:25 GMT

Hi All,

Is there a way to search on differentially assigned ( or null ) different security profiles ( AntiSpam / URL / Vulnerability etc ) within a policy ?

We use a couple of different vulnerability profiles/URL Filtering profiles within the same policy and its painful not being able to find where they are assigned. Am I missing something dreadfully obvious ?

Daniel

Re: Searching Policy for different security profiles

HULK — Thu, 30 Jan 2014 16:27:59 GMT

Hello Sir,

I am not clear about your exact query. Could you please explain your requirement in details (with an example).

Just an update, we can add a group security profile or individual profile i.e Antivirus, vulnerability, Data-filtering.

Example:

Thanks

Re: Searching Policy for different security profiles

dpenhall — Thu, 30 Jan 2014 19:42:06 GMT

Thanks for the reply. Since we have multiple different vulnerability profiles, under the policies tab ( as below ) I want to show in the rulebase GUI where each vulnerability profile is used. Similar to if I was looking for a address object I would put the objects name in the search bar of the policies tab and the rule base would then only show me rules where that object is in use. I was looking for away of NOT having to check each vulnerability in a 200 rule + config by manually having to check each rule and what vulnerability profile is assigned.

Does that make it clearer ?

Screenshot taken from home PA, not work policy in question.

Re: Searching Policy for different security profiles

HULK — Thu, 30 Jan 2014 21:22:24 GMT

Hello Daniel,

Thanks for your update. As per my knowledge, we can't make a search from the GUI as per "vulnerability profile name". But, you can fetch the same information through CLI.

Example:

> set cli config-output-format set

admin@Subhankar> configure

Entering configuration mode

[edit]

admin@Subhankar# show rulebase security rules | match "Basic AV" >>>>>>>>>> the profile name you are searching for.

set rulebase security rules "Outbound Services" profile-setting profiles virus "Basic AV"

set rulebase security rules "Permitted Applications" profile-setting profiles virus "Basic AV"

set rulebase security rules "Email Out" profile-setting profiles virus "Basic AV"

Hope this helps

Thanks

Re: Searching Policy for different security profiles

dpenhall — Thu, 30 Jan 2014 22:57:22 GMT

Hey Hulk,

Thanks for that, should have also mentioned the we are running Panorama so figured had to run these commands on that device.

- set cli config-output-format set

- configure

- show device-group "Policy Name" pre-rulebase security rules

Key issue is that match command doesnt work here so had to manually copy from the CLI output and search via notepad.