Policies security rules - filtering issue

vesna.djukic — Sat, 28 Dec 2013 16:00:07 GMT

Hi,

Do you know is there any documentation regarding policies security rules filtering?

I have found some strange behavior for filtering. Examples below on the screenshots are from Palo Alto testing firewall (sv 5.0.6). As it can be seen, if I use filter (source-user eq ‘any’) not all relevant results are returned which is obviously wrong.

Also, I have noticed inconsistency in applying complex filters, i.e. with logical operators. One of the issues was incorrect parsing of the following filter: (A and (B or C)) should give the same result set as ((A and B) or (A and C)). However, this is not the case. This was noticed also on 4.1.x versions.

Do you have similar experience and/or do you know where can I find detailed documentation regarding filtering (I cannot find it, am I missing something)?

Thank you in advance.

Best regards,

Vesna

Re: Policies security rules - filtering issue

cstancill — Sat, 28 Dec 2013 17:33:56 GMT

Vesna,

You aren't missing anything. Please open a case so that we can address this with the developers. Thank you for bringing this to our attention!

Craig

topic Policies security rules - filtering issue in General Topics

Policies security rules - filtering issue

Re: Policies security rules - filtering issue