topic Re: Source IP address is set to "none" in General Topics

Source IP address is set to "none"

M.Hafi — Sun, 24 Apr 2016 13:42:11 GMT

Hello All,

Lately I am noticing some polices that the Source IP address set to none as shown below can anyone let me know if none act like any or not?

I think yes as I created policy from Noc_OSS zone with IP add 192.168.*.* toward Default zone with IP add 192.168.*.* after I commit showed me Warnings that the below policy shadow the new one.

And is there any way I can filter polices based on none as a source IP address?

Thanks in advance,

Hafi.

Re: Source IP address is set to "none"

kiwi — Mon, 25 Apr 2016 07:08:49 GMT

Hi Hafi,

I believe this article answers your question :

IP-Address-is-Set-to-NONE

Hope it helps,

-Kim.

Re: Source IP address is set to "none"

M.Hafi — Mon, 25 Apr 2016 07:32:33 GMT

Hello Kim,

First of all thanks for your replay.

The article I think will not apply to my case as the article speaks about VPN (IKE Gateway) but my policy it’s a security policy.

Maybe the below interface configuration will help:

Thanks,

M.Hafi

Re: Source IP address is set to "none"

BenjAudy.MTL — Mon, 25 Apr 2016 20:47:35 GMT

Hi,

Which PanOS version are you using? Can you show us the Source tab in your rule?

Benjamin

Re: Source IP address is set to "none"

M.Hafi — Tue, 26 Apr 2016 05:46:30 GMT

Hi Benjamin,

It's PanOS 7.0.3, about the source tab please find below snapshoot below.

I think it's migration issue.

Thanks,

Hafi.

Re: Source IP address is set to "none"

santonic — Tue, 26 Apr 2016 06:51:08 GMT

This screen let's you click OK and close it? Cause yellow fields indicate something is missing and the WebUI dialog doesn't let you proceed like this with 'ok' button'

So you have to either select any or enter some addresses.

What kind of migration did you do? Cause with WebUI you couldn't come to such situation. Nor with CLI probably.

Re: Source IP address is set to "none"

M.Hafi — Tue, 26 Apr 2016 07:51:11 GMT

Hi,

That’s the strange thing how this policy was created I can’t understand.

We did migration form Cisco WS-SVC-FWM-1 to P.A 5050.

Hafi.