Nested Policies Suggestion

aimet — Wed, 01 Jun 2016 17:42:17 GMT

Not really sure where to put this, but thought it might be a good idea and wanted to share it. Im still rather new to PA and so far I am enjoying it! However, I noticed after a while of creating and editing security policies it becomes quite a mess and difficult to manage. I believe if there is a way to create folders or nested security policies for particular sets of rules, it will solve this management crisis.

example:

Guest Network Rules

---- Guest Access rule

---- Guest Restriction rule

---- Guest Misc. rule

Re: Nested Policies Suggestion

Anon1 — Wed, 01 Jun 2016 20:11:49 GMT

The concept of nesting / folders is not available in Palo Alto Networks Panorama / Firewalls. However, you can create tags with the name of the folders and assign these to the rules. This way you can filter the ruleset by tag names.

topic Nested Policies Suggestion in General Topics

Nested Policies Suggestion

Re: Nested Policies Suggestion