topic Re: Knowing overlapping rules in General Topics

Knowing overlapping rules

SOC_CSG — Wed, 29 Oct 2014 12:49:28 GMT

Hi,

There is any way in PaloAlto to know the rules which are being overlapped in anothers?????

thanks

Re: Knowing overlapping rules

Retired Member — Wed, 29 Oct 2014 12:54:05 GMT

When you commit you may see warnings about that but I don't know any other way.

Re: Knowing overlapping rules

HULK — Wed, 29 Oct 2014 13:00:12 GMT

Hello COS,

As per this DOC: Shadow Rule, i do believe that during commit only, the firewall will show the warning message. It's not showing even during config validation. ( Device > Setup > Operation > Validate candidate configuration).

Thanks

Re: Knowing overlapping rules

SOC_CSG — Wed, 29 Oct 2014 13:03:04 GMT

OK, perfect...thanks a lot

Re: Knowing overlapping rules

SOC_CSG — Wed, 29 Oct 2014 13:15:05 GMT

do you know any known application or program to find the overlapping rules???

somthing like migrations tools or any kind of apps like this to find the overlapping rules...

Re: Knowing overlapping rules

Retired Member — Wed, 29 Oct 2014 13:19:03 GMT

There are some solutions but not just for that purpose.I don't know a free one.

One example

http://www.tufin.com/media/32638/Tufin-Palo_Alto_Networks-Solution_Brief.pdf