topic Re: Object references - 'where used' in General Topics

Object references - 'where used'

VincentBorrie — Fri, 27 Feb 2015 12:21:24 GMT

Hi all,

I'm new to the Palo Alto's, having cut my teeth on Stonesoft, Checkpoint and Sophos.

One nice feature in those solutions was the ability to select an object (of any type) and be able to list everywhere that it was being used - from policies to groups.

I've not yet seen a way of mimicing this in PAN-OS 6.0. Is there a way, or a work-around, to achieve this?

Thanks in advance

Re: Object references - 'where used'

lewis — Fri, 27 Feb 2015 13:22:26 GMT

one way is to attempt to delete the object and it will give you all the rules it is used in. but there is no 'where used' button

Re: Object references - 'where used'

Bradley_Melton — Fri, 27 Feb 2015 14:15:53 GMT

There is no way to do this currently. There is a sorta/kinda workaround found over here: How do I find out every place an object is used?

That page also has the feature request ID so you can contact your SE and vote for this to be added to PAN-OS.

Re: Object references - 'where used'

VincentBorrie — Fri, 27 Feb 2015 14:20:19 GMT

Hi guys,

thanks for your answers - looks like Palo could do with following Checkpoints 'where used' and Stonesoft's 'References' functionality.

Re: Object references - 'where used'

pulukas — Sat, 28 Feb 2015 14:00:14 GMT

Please vote for FR ID : 1285 which would add "where used" functionality that is not currently available.

Right now I use the following technique on the CLI configuration

Change the display of configuration to set mode:

set cli config-output-format set

the pipe the configuration to match with the address object name

show vsys | match net-192.168.1.0-24

this pulls out all the set commands that contain the object name.

Re: Object references - 'where used'

Dz3015 — Mon, 02 Mar 2015 16:45:27 GMT

As everyone said, you need to vote on the FR. Until then, the only way to accomplish this is to use the search bar at the top of the policy.