topic Re: Service to Application for more than 100 policies in General Topics

Service to Application for more than 100 policies

ghostrider — Mon, 24 Oct 2016 11:34:12 GMT

Hello Experts

I have more than 100 policies on PA firewall with service ports and application any. Manually identifying the application for each rule from logs and creating the rule with specific application on top of that rule, is really time consuming and lot of work required. Is there any good way from Panorama or any other script or tool, I can use for this purpose?

Regards,

Re: Service to Application for more than 100 policies

bmorris1 — Mon, 24 Oct 2016 12:45:12 GMT

Hello Ghostrider,

The migration tool can be used for achieving this. You can hook the tool up to your firewall and it will review your logs/rules in order to suggest app-id policies for you.

All information on the migration tool can be found here:

https://live.paloaltonetworks.com/t5/Migration-Tool/ct-p/migration_tool

hope this helps,

Ben

Re: Service to Application for more than 100 policies

ghostrider — Mon, 24 Oct 2016 14:48:02 GMT

Hello Ben

Thanks for the reply. I am managing firewalls through Panorama. So in this case I have to integrate the Panorama into migration tool? But I am wondering this will not impact any thing because Panorama is in production.