topic Re: Viewing Rules in the Policy in General Topics

Viewing Rules in the Policy

fmd — Wed, 28 Sep 2011 13:00:19 GMT

Hi - we use Panorama and 4050s all running 4.0.5. We have a lot of rules on this firewall for one reason or another (it's a port from Checkpoint of an internal datacentre firewall where there are lots of non-web applications etc). Anyway, I can find rules in the policy GUI fine - but what I'd like to be able to do is locate a specific rule quickly in relation to the other rules around it. On Checkpoint (sorry for the coimparison!) I could easily locate an object find out what rule it was being used in (by rule number - obviously they change but it would give me the rule number at that point) - i could then scroll easily to the rule and see the rules around it. I can't see any easy way of me negotiating to a rule (especially as the web based policy with the number of rules we have is slot and jerky - compared to checkpoint). Understanding where a rule is in a large rule base (and making a decision where you place a new rule) is very important to us!

Any help appreciated!

Re: Viewing Rules in the Policy

mschuricht — Wed, 28 Sep 2011 15:44:00 GMT

We do not have "Where Used" functionality in the product today. You can use a specific filter by name on a particular column (eg. source/member eq '<source address object name>') to thin down the rules and then remove the filter to view rules around the point of interest.

Re: Viewing Rules in the Policy

mgentile — Mon, 03 Oct 2011 16:52:15 GMT

I've noticed the same problem. LOTS of scrolling required.

In the 3.x releases, you used be able to use the browser's 'find' function to match text anywhere in the policy. In the 4.x releases they've changed to some sort of JS menus that work in such a way that the 'CTRL+F' will only match text that is currently rendered on screen. Not very useful. 😞

Re: Viewing Rules in the Policy

fmd — Tue, 04 Oct 2011 13:52:21 GMT

Hi mschuricht - when in the policy tab - if I use the find to find to locate a specific rule. I get only that rule in the policy window. If i then remove the filter - I do see the whole rulebase again - but NOT at the point in the rulebase where the rule i just searched for - I get taken back to the top of the rulebase again. Not very useful. I essentially want to be able to find a specific rule in the policy with a view of the rules that are around it (without having to scroll - which is not a good way of finding rules with the Palo Alto when you have a large rulebase).

Re: Viewing Rules in the Policy

fmd — Fri, 07 Oct 2011 14:06:20 GMT

Bump!! - Anyone help with this issue?

Re: Viewing Rules in the Policy

frank_henry — Fri, 07 Oct 2011 16:57:27 GMT

+1. Probably a WAD and need feature request. If there was indexing (even hidden) then focus could be restored on cookie state.

Re: Viewing Rules in the Policy

bpappas — Fri, 07 Oct 2011 20:26:48 GMT

The comment by farrel_dougherty looks like a feature request (as frank_henry suggested).

Please get in touch with your sales team to make sure they can file a feature request on your behalf.

Thanks,

Benjamin