topic How to filter rule by subnet in General Topics

How to filter rule by subnet

Mugwali — Fri, 05 Aug 2016 05:37:53 GMT

Hi there,

I'm trying to filter the rules via subnet. Is this possible ? I've tried copying (addr in '10.10.10.0/24') from a working log filter search and that doesn't seem to work. There's no filter builder like the log search box so i can just use that to figure this out. This is not very intuative.

is it even possible to filter rules by Subnet or host IP address ?

Re: How to filter rule by subnet

reaper — Fri, 05 Aug 2016 09:27:52 GMT

The search filter in the security policy is object based and can only be used to search for a string rather than a logical subnet

Instead of the 'addr in' you can use (source/member contains '10.10.10.') to look for a string match that corresponds to your subnet, this will however not include matches where the address field is 'any'

hope this helps

Re: How to filter rule by subnet

RFalconer — Fri, 05 Aug 2016 15:53:10 GMT

You could also try a search in the CLI, probably easier using the set CLI output. Not as convenient as the GUI but should work also.